Federation Security Services Guide › Configure SiteMinder as an Account Partner › Configure Single Sign-on for WS-Federation › Specify IP Address Restrictions for Resource Partners (optional)

Specify IP Address Restrictions for Resource Partners (optional)

The FSS Administrative UI allows you to specify an IP address, range of IP addresses, or a subnet mask of the Web server on which a user’s browser must be running for the user to access a Resource Partner. If IP addresses have been specified for a Resource Partner, only users who access the Resource Partner from the appropriate IP addresses are accepted.

To specify IP addresses

1. Log in to the FSS Administrative UI.
2. Select the Resource Partner you want to configure.
3. Open the Resource Partner Properties dialog.
4. Select the SSO tab, then click on Restrictions.
5. Click Add.

   The Add an IP Address dialog box opens.

6. Select one of the following radio buttons to indicate the type of IP address value you are adding:

   Note: If you do not know the IP address, but you have a domain name for the address, click on the DNS Lookup button. In the DNS Lookup dialog box, enter a fully qualified host name in the Host Name field and click OK.

   • Single Host--specifies a single IP address that hosts the user’s browser. If you specify a single IP address, the Resource Partner can only be accessed by users from the specified IP address.
   • Host Name--specifies a Web server using its host name. If you specify a host name, the Resource Partner is only accessible to users who access it from the specified host.
   • Subnet Mask--specifies a subnet mask for a Web server. If you specify a subnet mask, the Resource Partner is only accessible to users who access the Resource Partner resources from the specified subnet mask.

     When you select this radio button, the Add an Address and Subnet Mask dialog opens. Use the Left and Right arrow buttons, or click and drag the slider bar to select a subnet mask.

   • Range--specifies IP address range. If you specify a range of IP addresses, the Resource Partner only permits users who access the Resource Partner resources from one of the IP addresses in the range of addresses. You enter a starting (FROM) and ending (TO) addresses to determine the range.
7. Click OK to save your configuration.