Cloud-delivered applications offer the convenience of accessibility from anywhere in the world. However, this allows for exposure to risks such as access using stolen credentials, dictionary attacks, and other forms of brute-force attacks to gain access to the applications.

While Identity and Access Management mitigates some of this risk, you can use Trusted IP Lists to further restrict access to your applications by specifying IP addresses that are allowed on a per tenant basis.

By default, during the creation of a new tenant, access is allowed to both the web interface and the API from any IP address. The Trusted IP List is a list of trusted IP addresses that are allowed to access a tenant. You can use a Trusted IP List to limit access to a single tenant, or you can use it to limit access to a parent tenant and its children in a multitenant hierarchy. In a multitenant hierarchy, you add the Trusted IP List on the parent tenant, the list gets inherited from the parent tenant to its child tenants, and is enforced from the top-down.