Federation Security Services Guide › Identify Consumers at a SAML 1.x Producer › Configure IP Address Restrictions for 1.x Consumers (optional)

Configure IP Address Restrictions for 1.x Consumers (optional)

The FSS Administrative UI allows you to specify a single IP address (by address or host name), a range of IP addresses, or a subnet mask that users must use to access an consumer site. If IP addresses have been specified for a consumer, only users who access the consumer site from the appropriate IP addresses will be accepted by the consumer.

The procedure for specifying IP address restrictions for a consumer is the same as configuring IP restrictions for a policy in a policy domain.