Go to Settings in Adobe Admin Console.
Last updated on
Aug 3, 2026
Create an allowlist of trusted IP addresses to prevent unauthorized sign-ins.
IP-based access control strengthens security by ensuring that users can access Adobe products, sign in to business profiles, and switch profiles only from approved network locations.
Restrict access to Adobe products to specific office networks, VPNs, or secure facilities. It applies across all directories and products in your Admin Console. If users require unrestricted access from any location, skip the configuration.
Before configuring restrictions, identify your organization's public-facing IP addresses or CIDR blocks. Contact your network administrator if you're unsure about your current public IP.
Prerequisite
Ensure you have the following before you start configuring IP-based access controls:
- System Administrator role in Adobe Admin Console
- Public IP addresses or CIDR blocks for your approved networks
- Your own current public IP address (required for first entry)
Add IP addresses to the allowlist
Expand Privacy and security in the navigation menu and select Authentication settings.
In the IP-based access section, select Add IP address.
Enter your own public IP address first to prevent losing access, then add other trusted IP addresses or CIDR blocks—separate multiple entries with commas.
Select Save.
Your restrictions take effect within minutes. Users outside the allowed IP ranges will be blocked the next time they attempt to sign in or switch profiles. Adobe recommends that you inform your users in advance of this change.
You can add up to 150 different IPv4 public IP ranges (for example, 192.168.1.1 or 10.0.0.0/24). To modify or remove entries, select the edit or delete icon next to any listed address.
Caution
Always add your own public IP address as the first entry. If you accidentally lock yourself out of Admin Console, contact Adobe Customer Care.
Note
Only public IP addresses are restricted. Private IP addresses are not affected. If you use a secure web gateway, route all traffic through it, and confirm that the required Adobe domains are allowed.
