IP whitelist ⓘBusiness

Summary

Allow access only from whitelisted IP addresses/ranges. Complements the profession-based access control; similar to email domain whitelist but based on source IP.

Purpose

• Access control for employees/locations based on known source IPs (office, VPN, data center).
• Complements the site policy (access groups); does not replace it.

How it works

• During login, DocCheck checks profession and source IP.
• Access is granted if the profession is allowed OR the source IP is on the whitelist.
• If the profession is not allowed AND the source IP is not on the whitelist: access is denied.

Configuration

• In the login client settings in DocCheck Access, add the IP addresses.
• Multiple IP addresses can be added.

Notes

• Subnets/IP ranges are not supported; only individual IP addresses can be added.
• Scopes/consents and the OAuth2 flow remain unchanged.
• Can be combined with the Email domain whitelist.