The IP allowlist includes policies that specify which end users' IP addresses can authenticate into the Anaplan platform. 

Authentication is a security process that verifies your identity and approves your access to Anaplan upon log in.

If your IP address is:

  • Added to the IP allowlist, the IP allowlist approves your authentication and you can access Anaplan.
  • Not added to the IP allowlist, the IP allowlist blocks your authentication and you're unable to access Anaplan.

The IP allowlist supports these authentication methods:

  • Certificate authentication
  • SAML single sign-on (SSO)
  • Web authentication (user name and password)

Tenant security administrators can set up the IP allowlist for their tenant.

The IP allowlist is disabled by default. To set up the IP allowlist, access Administration, add an IP address to create a new policy, and then enable the IP allowlist.

Note: You can enable the IP allowlist for the default tenant only. The list doesn't block authentication for visiting users.

See Anaplan tools covered by the IP allowlist.

To resolve login and authentication issues that can happen when the IP allowlist is enabled, see IP allowlist authentication errors .