Overview
You must be an admin to access the IP whitelisting settings in your Apollo account. Access to this feature also depends on your Apollo plan. Check out the Apollo pricing page for more details.
Enable IP whitelisting to restrict unauthorized access to your Apollo account and only give access to the specific IP addresses or ranges you consider trustworthy.
Apollo accepts the following formats:
- Single IP Address
- IP Range
- Classless Inter-Domain Routing (CIDR)
Feeling a little lost? Here's a quick summary of what these terms mean:
- An Internet Protocol (IP) address: This is a unique number assigned to your device or network to help identify it on the internet. There are two types of IP addresses—dynamic, which change automatically as you connect or disconnect from a network—and static, which always remain fixed. Note that if you enable whitelisting and users with a dynamic IP address try to connect to Apollo after their IP address changes, they cannot access Apollo unless you add the new IP address or range to your whitelist.
- An IP Range: This is a set of consecutive IP addresses within a local network or assigned to a subnet. If you or your team uses a VPN, contact your IT administrator for guidance on adding your IP range.
- Classless Inter-Domain Routing (CIDR): Otherwise known as supernetting, this is an IP assigning system used by many organizations to increase the efficiency of IP address allocation.
Check out the following sections to enable or deactivate IP whitelisting, and add or delete IPs from your Apollo whitelist.
Enable IP Whitelisting
To enable IP Whitelisting in Apollo:
- Launch Apollo and click Settings > Users & teams > Security.
- Enter the IP addresses, ranges, and CIDRs that you want to whitelist in the IP address whitelist field.
- Make sure you add a comma after each IP address or range that you want to whitelist and then click + Add.
- Apollo adds the IP addresses to your whitelist and informs you if any other users in your team may lose access. To view any potentially affected users, click the word user.
- Apollo then displays the details of any users who may lose access if you don't add them to your whitelist. To add any missing IPs, click the Copy icon, then paste them into the IP address whitelist field and click + Add.
- To search for an IP address on your whitelist, type the IP into the IP address search bar.
- Click the trash can icon next to an IP address or range that you want to delete. Click Delete to continue.
- When you're ready to activate IP whitelisting in Apollo, toggle on Enable IP whitelisting. Apollo warns you if it detects any users that may lose access. To continue, click Enable.
You have now enabled IP whitelisting in Apollo. Only users who try to access your account from one of the whitelisted IP addresses, ranges, or CIDRs can now successfully enter Apollo.
If you're an admin, you can repeat this process any time you want to add or delete IPs from your whitelist.
Deactivate IP Whitelisting
To deactivate IP whitelisting for your Apollo account:
- Launch Apollo and click Settings > Users & teams > Security.
- Toggle off Enable IP whitelisting in the IP whitelisting tab.
- Click Disable to confirm your choice.
You have now deactivated IP whitelisting in Apollo.
Next Steps
IP allowlisting is active. Here are the other security and access controls worth setting up to keep your Apollo workspace protected.
| Configure Advanced Security Protocols on Apollo | IP allowlisting is just one layer of your security setup. Configure password policies, login controls, MFA, and SSO from Apollo's Security settings to give your team a comprehensive set of protections that go beyond network-level access. |
|---|---|
| Use Single Sign-On (SSO) on Apollo | Want your team to access Apollo with one secure set of credentials? Connect your Okta, Microsoft Entra ID, or Google account and configure SSO for your workspace so your team never manages a separate Apollo password alongside the rest of your tool stack. |
| Configure SCIM User Provisioning for SSO | Already using SSO with Okta or Microsoft Entra ID? Set up SCIM to automatically create, update, and deactivate Apollo users whenever your team changes in your identity provider so your access list stays current without manual upkeep. |
| Create and Assign Permission Profiles | Controlling who can reach Apollo is only half the picture. Build custom permission profiles and assign them to your team to make sure each user only has access to the features and data their role actually requires once they're in. |
| Add, Manage, and Deactivate Users | Keeping your IP allowlist tight means keeping your user list tight too. Invite new users, update permission profiles, and deactivate accounts whenever your team changes so only the right people have active access to your Apollo workspace. |