Finance | Project Operations, Human Resources, ...

Handling IP Whitelisting for UAT and Production for Outbound API Integration

(1) Share

Report

Posted on by CU04100547-0

I have integrated an outbound API in D365 FO, which responds only to whitelisted IPs. Currently, I've whitelisted my VM IP for development and it is working fine for Dev environment, but when we deploy to UAT or Production, the IPs will be different, and the integration won't work. What is the best approach for handling IP whitelisting for UAT and Production environments?

I have the same question (0)

All responses (4)

Answers (0)

Martin Dráb 237,807 Most Valuable Professional on at

Like (0)

Report

Can you tell us more about your solution, please? Your current description isn't clear to me.

(Moved from Dynamics AX forum.)

Was this reply helpful? Yes No
Anton Venter 20,345 Super User 2025 Season 2 on at

Like (0)

Report

Are you concerned that the IP addresses of the F&O production server might change and then API wil be rejecting your connection? If so, then a possible solution would be, is to add the IP ranges of the servers to the whitelist. If they change, the are still in the range and are still allowed.

Was this reply helpful? Yes No
M talha 2 on at

Like (0)

Report

Hi Anton Venter,

Can you tell me how I can find the IP range for D365 FO environments? I downloaded the JSON file from 'Azure IP Ranges and Service Tags – Public Cloud' but it contains too many IPs, and I'm unsure which range to whitelist.

Was this reply helpful? Yes No
Suggested answer

Anthony Blake 2,956 Super User 2025 Season 2 on at

Like (0)

Report

Take a look at this info on the Deployment FAQ:

https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/deployment/deploymentFAQ?WT.mc_id=DX-MVP-5000413#what-are-the-outbound-ip-ranges-for-my-finance-and-operations-environment

"For any of your external components that have special handling for the outbound IP addresses of requests originating from the AOS, such as a firewall, you can find the outbound IP addresses by using the Service Tag Discovery API or using the downloadable JSON files."

Was this reply helpful? Yes No