SOLVED

Trusted IPs for MFA

%3CLINGO-SUB%20id%3D%22lingo-sub-15175%22%20slang%3D%22en-US%22%3ETrusted%20IPs%20for%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-15175%22%20slang%3D%22en-US%22%3E%3CP%3EI%20added%20an%20IP%20range%20to%20MFA%2C%20but%20I'm%20still%20getting%20prompted.%20How%20can%20I%20troubleshoot%20this%3F%20How%20long%20does%20it%20take%20for%20the%20settings%20to%20go%20into%20effect%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-18479%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IPs%20for%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-18479%22%20slang%3D%22en-US%22%3E%3CP%3EEither%20check%20some%20webservice%20(google%3A%20my%20ip%20address)%20while%20you're%20at%20work%2C%20or%20talk%20to%20the%20IT%2FNetwork%20team%20and%20let%20them%20tell%20you%20the%20public%20IP%20range%20(ip%2Bsubnetmask%20bits)%20if%20you're%20using%20more%20than%20one%20IP%20address.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-16379%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IPs%20for%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-16379%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Dean%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eyou%20have%20to%20keep%20in%20mind%20that%20for%20your%20setting%20to%20work%20you'll%20have%20to%20set%20external%20IPs%20as%20trusted%20IPs%20for%20MFA.%20So%20for%20example%20when%20you%20access%20your%20resources%20from%20within%20your%20company's%20network%20you%20don't%20have%20to%20use%20MFA%20whereas%20you%20will%20need%20to%20authenticate%20via%20second%20factor%20when%20accessing%20from%20outside%20of%20your%20company.%20Just%20as%20Nils%20mentioned%20your%20settings%20should%20be%20active%20almost%20instantly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3ETom%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-15640%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IPs%20for%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-15640%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20is%20the%20best%20way%20to%20determine%20the%20IP%20range%20that%20should%20be%20used%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-15457%22%20slang%3D%22en-US%22%3ERe%3A%20Trusted%20IPs%20for%20MFA%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-15457%22%20slang%3D%22en-US%22%3EFor%20me%20the%20setting%20was%20active%20almost%20directly.%20At%20least%20within%20minutes.%3C%2FLINGO-BODY%3E
Highlighted
Respected Contributor

I added an IP range to MFA, but I'm still getting prompted. How can I troubleshoot this? How long does it take for the settings to go into effect?

4 Replies
Highlighted
For me the setting was active almost directly. At least within minutes.
Highlighted

What is the best way to determine the IP range that should be used?

Highlighted
Solution

Hi Dean,

 

you have to keep in mind that for your setting to work you'll have to set external IPs as trusted IPs for MFA. So for example when you access your resources from within your company's network you don't have to use MFA whereas you will need to authenticate via second factor when accessing from outside of your company. Just as Nils mentioned your settings should be active almost instantly.

 

 

Regards,

Tom 

Highlighted

Either check some webservice (google: my ip address) while you're at work, or talk to the IT/Network team and let them tell you the public IP range (ip+subnetmask bits) if you're using more than one IP address.