<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeKnowledge Base
Multiple IP Addresses in the IP Chain in System Log
Sep 12, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
An IP zone enables admins to define network parameters around a set of IP addresses. IP addresses can be added for both gateway servers and trusted proxy servers to IP zones. When determining whether a request is from inside or outside of an IP zone, Okta will check the IP chain. The IP chain is the IPs of all the network hops between the originating request and Okta. 
Applies To
  • Okta System Logs
  • IP Chain
  • IP
Solution

The IP Chain is visible in the Okta System log when that specific log event is expanded.

IP Chain

If the incoming request to Okta passes through any proxies, the IP addresses of those proxies will be stored in the format (client IP, proxy1, proxy2, ...). This is useful when working with trusted proxies.

If multiple IP addresses are visible, it means that proxy IPs were detected during the request.

If there is only one IP present, it means that the traffic originated from that IP only. If the HTTP headers were modified to hide the proxy, then no other IPs would be visible in the IP chain.

 

Related References

Recommended content

Still looking for help?
Loading
Multiple IP Addresses in the IP Chain in System Log