3806241 - IP restriction doesn't work in OIDC - SuccessFactors APIs

You configured IP restriction for an API user following the steps from Restricting Access to APIs by IP Address | SAP Help Portal, however they are not being considered when authenticating into the API using OIDC.

SAP SuccessFactors HCM Suite

Expected behavior.

OIDC was not designed to use the IP restrictions feature.

Our recommendation is to use client credentials grant type and obtain the OIDC token using mTLS certificate (KBA 0003681224). This approach delivers security that is the same as, or even stronger than, relying on IP restrictions for API authentication.

oidc, ip restriction, allowlist, basic authentication, migration, ip allowlist, odata, open id connect , KBA , LOD-SF-INT-OID , OpenID Connect , Problem