Azure AD B2C outgoing IP addresses

Question

I've a custom policy that reaches out to other services via a RESTful technical profiles for claims processing. I need to whitelist the IP address range of the AD B2C instance to allow connection to these services as they reside outside of the Azure domain.

I've come across this post, and the updated set of data center IP addresses for Azure here.

A few questions

Are there different IP addresses for Azure AD B2C than Azure AD or are they both covered by the "AzureIdentity" system services in the 2nd link?
If the latter, which set of IP addresses are relevant to Azure AD B2C, "AzureActiveDirectoryDomainServices" or "AzureActiveDirectory.ServiceEndpoint" ?
Finally, is there a more definitive way to scope down the set of IP addresses, e.g. by region or perhaps by addressPrefix as with Azure Functions via the resource explorer and a resource profile?

TIA

user_8357357 · Answer

Not possible. The outgoing IPs will be in the Azure Datacentre IP range. Anyone can stand up a VM in this ip range. Rather than use network security, work on API authentication schemes described here: https://docs.microsoft.com/en-us/azure/active-directory-b2c/secure-rest-api

Azure AD B2C outgoing IP addresses

1 Answers