IP Allowlist Requirements for Okta Webhooks
Apr 28, 2026
API Access Management
Okta Classic Engine
Overview
Okta does not provide a specific IP address range exclusively for webhooks. Because Okta cannot guarantee that a webhook originates from a single IP address, administrators must allow all IP addresses associated with the specific Okta cell.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Webhooks
- Firewall allowlists
Solution
Are there specific IP ranges for Okta webhooks?
Okta does not maintain specific IP ranges for webhooks. Okta cannot guarantee that a webhook originates from a specific IP address. To ensure successful webhook delivery, allow all IP addresses listed for the specific Okta cell.
