Enable and Configure the Login IP Allowlist

Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account.

Available in: All Marketing Cloud Engagement editions

User Permissions Needed
To change login IP allowlist settings:	Marketing Cloud Administrator

Before you complete these steps, populate the login IP allowlist with the IP ranges of your users. You can add addresses and ranges manually, or add suggested IP ranges based on the past 6 months of logins to your account.

In Marketing Cloud Engagement Setup, in the Quick Find box, enter security, and then click Security Settings.
Click Edit.
For Restrict Logins by IP Address (IP Allowlisting), select a setting. Choose from these options:
- IP Allowlisting Disabled: Users can log in from any IP address. The access log doesn’t track login attempts based on IP address.
- Log Allowlist Violations: Sometimes called monitoring mode. Users can log in from any IP address. The access log tracks login attempts from IP addresses that aren’t on the allowlist.
- Log Violations and Deny Access: Sometimes called blocking mode. Users can log in only from IP addresses on the allowlist. The access log tracks login attempts from IP addresses that aren’t on the allowlist.
Important
If you select Log Violations and Deny Access, Marketing Cloud Engagement enforces the login IP allowlist for each user the next time they login. Users who are logged in when you make this change remain logged in. Marketing Cloud Engagement enforces the allowlist the next time they log in.

Before you log out, make sure that your IP address, or a range that includes your IP address, is on the allowlist. If you log out before you add your IP address to the allowlist, you can’t log back in.
Save your changes.