---
schema_version: "1"
id: 7ecb091a5d558b0a3d01d8b416ea9fe77de75f9b9c2fb4774e74ec1687ed58f9
title: "Optional: Configure Client IP Matching"
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/server/trusted_auth_optional.md
canonical_url: https://help.tableau.com/current/server/en-gb/trusted_auth_optional.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 6a859af549e143be64fa3403c212da088e02b2f97eaec35cbf9ac9d5b506480d
description: Configure client IP matching for trusted authentication.
---
[Skip to main content](#main-content)

# Optional: Configure Client IP Matching

By default, Tableau Server does not consider the client web browser IP address when it creates or redeems tickets. To change this, you need to do two things: specify an IP address using the `client_ip` parameter in the POST request that obtains the ticket, and follow the steps below to configure Tableau Server to enforce client IP address matching.

1. Open TSM CLI and type the following command:
    
    tsm configuration set -k wgserver.extended\_trusted\_ip\_checking -v true
2. Then type the following command:
    
    tsm pending-changes apply 
    
    If the pending changes require a server restart, the `pending-changes apply` command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case, there is no restart. You can suppress the prompt using the `--ignore-prompt` option, but this does not change the restart behaviour. If the changes do not require a restart, the changes are applied without a prompt. For more information, see [tsm pending-changes apply](https://help.tableau.com/current/server/en-gb/cli_pending-changes.htm#pending-changes-apply).