<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
List of IP Addresses that Should be Allowlisted for Processing Email Delivery
Administration
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview

Issues with email delivery may occur if the allow list is configured in the infrastructure. Okta recently added an additional set of IP addresses to increase email delivery capacity.  The goal of this knowledge article is to present a list of all of those IP addresses.

Applies To
  • Administration
  • Security
  • IP Address
  • Firewall
  • Email Notification
  • Allowlisting
Solution

Okta uses SendGrid for sending emails from the production service. Okta has DNS, dedicated IPs, and domain authentication (DKIM and SPF) configured in SendGrid to separate Okta senders from each other and from other SendGrid senders. The following SendGrid IP addresses are dedicated to only sending Okta emails to Okta customers:

  • 167.89.110.192
  • 167.89.126.180
  • 167.89.14.31
  • 167.89.21.169
  • 198.21.5.209
  • 50.31.57.204
  • 159.183.193.109
  • 159.183.213.105
  • 159.183.213.107
  • 159.183.214.96
  • 159.183.213.204
  • 159.183.200.101
  • 149.72.233.170
  • 149.72.90.103
  • 192.254.124.136

Okta does not have a dedicated outbound MTA. Sendgrid does not have company-specific outbound MTAs as that would not be scalable or feasible.

The SendGrid Services leverage colocation data centers provided by Zayo and Lumen (formerly CenturyLink), both located in the United States of America. These colocation data centers do not store any Customer Data.

Loading
List of IP Addresses that Should be Allowlisted for Processing Email Delivery