Restrict Allowed IPs in Okta for a Service or Subdomain
Jan 9, 2026
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article explains whether it is possible to allow-list Okta IP addresses for specific subdomains.
Applies To
- IP Allowlist
Solution
It is not possible to restrict the IP allow listing to a specific subdomain, as our services utilize multiple IP addresses, which are dynamic and change at regular intervals for security purposes. The IPs used are regularly updated in the JSON file available on our Firewall Allowlisting page.
To determine which cell is hosting the org, please see the bottom of the Okta Admin Console page. The screenshot below is an example.
