---
schema_version: "1"
id: 2cb6e9a616dd4995208ff196291e4c460c4b5b5bb2ff7cb8b273bec18cd9b999
title: "Optional: Configure Client IP Matching"
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/server/trusted_auth_optional.md
canonical_url: https://help.tableau.com/v0.0/server/en-gb/trusted_auth_optional.htm
source_site: help.tableau.com
content_type: documentation
content_hash: a0fe0bf2fb6b134aec8b09177f048571ac2d62649b073318dccd0f68d7ac726d
description: Configure client IP matching for trusted authentication.
---
[Skip to main content](#main-content)

# Optional: Configure Client IP Matching

By default, Tableau Server does not consider the client web browser IP address when it creates or redeems tickets. To change this, you need to do two things: specify an IP address using the `client_ip` parameter in the POST request that obtains the ticket, and follow the steps below to configure Tableau Server to enforce client IP address matching.

1. Open TSM CLI and type the following command:
    
    tsm configuration set -k wgserver.extended\_trusted\_ip\_checking -v true
2. Then type the following command:
    
    tsm pending-changes apply 
    
    If the pending changes require a server restart, the `pending-changes apply` command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case, there is no restart. You can suppress the prompt using the `--ignore-prompt` option, but this does not change the restart behaviour. If the changes do not require a restart, the changes are applied without a prompt. For more information, see [tsm pending-changes apply](https://help.tableau.com/v0.0/server/en-gb/cli_pending-changes.htm#pending-changes-apply).