---
title: "Allow or Block IP Addresses in RapidIdentity"
slug: "allow-or-block-ip-addresses"
description: "How to include or exclude IP addresses from your RapidIdentity system"
tags: ["How-To", "Blacklist", "Whitelist", "Authentication", "allow", "block"]
updated: 2025-03-03T21:54:03Z
published: 2025-03-03T21:54:03Z
canonical: "help.rapididentity.com/allow-or-block-ip-addresses"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.rapididentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Allow or Block IP Addresses in RapidIdentity

## How to Allow or Block an IP Range

To grant or deny access to RapidIdentity for a certain group of people, Tenant Administrators can do that through authentication policies.

1. Navigate to **Configuration > Policies > Authentication**. ![Authentication Policies Open.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Authentication%20Policies%20Open.png)
2. You can add the allow or block functionality to existing policies. ***Note: If you add this feature against one IP, you must apply it to all applicable policies as well.***
3. Navigate to that policy's **Criteria** tab. In the **Source Network** section, add the IP address **with [CIDR Notation](https://community.spiceworks.com/networking/articles/2495-what-is-cidr-notation)** to the Matching Subnets field and click the + to add. ![Matching Subnets.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Matching%20Subnets.png) ***Note: these can be defined with the help of websites such as [Subnet Calculator](https://www.subnet-calculator.com/).***

          **Enabled HTTP Header Processing**

          

In RapidIdentity Cloud the **Enabled HTTP Header Processing** checkbox must always be **☑** to ensure that the correct IP Address is evaluated.
4. Once all subnets and notations have been added, click **Save**. (Policies will have an asterisk (*) next to them until they are saved. ![Save.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/Save.png)

          Note

          

At this time, you may want to change the order of the policies so that the more focused policies are evaluated first. This will prevent other authentication policies from blocking the allowed IPs or allowing blocked IPs. Also ensure the Source Network information is updated in all applicable policies.