---
schema_version: "1"
id: 8963d907403e44d35358faf0232505a39a0c7d9a24e1fff240d7275016087a94
title: "Optional: Configure Client IP Matching"
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/server/trusted_auth_optional.md
canonical_url: https://help.tableau.com/current/server/en-us/trusted_auth_optional.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 036375f1f52e77ecf4ab0af8d5a2358a49ee9ed64960cd51b841e8b5e3121d62
description: Configure client IP matching for trusted authentication.
---
[Skip to main content](#main-content)

# Optional: Configure Client IP Matching

By default, Tableau Server does not consider the client web browser IP address when it creates or redeems tickets. To change this, you need to do two things: specify an IP address using the `client_ip` parameter in the POST request that obtains the ticket, and follow the steps below to configure Tableau Server to enforce client IP address matching.

1. Open TSM CLI and type the following command:
    
    tsm configuration set -k wgserver.extended\_trusted\_ip\_checking -v true
2. Then type the following command:
    
    tsm pending-changes apply 
    
    If the pending changes require a server restart, the `pending-changes apply` command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case there is no restart. You can suppress the prompt using the `--ignore-prompt` option, but this does not change the restart behavior. If the changes do not require a restart, the changes are applied without a prompt. For more information, see [tsm pending-changes apply](https://help.tableau.com/current/server/en-us/cli_pending-changes.htm#pending-changes-apply).