Merge pull request MicrosoftDocs#31490 from ArvindHarinder1/patch-34

Jak-MS · web-flow · commit 6d90f1812faa · 2019-05-17T15:55:45.000-05:00
Update use-scim-to-provision-users-and-groups.md
diff --git a/articles/active-directory/manage-apps/use-scim-to-provision-users-and-groups.md b/articles/active-directory/manage-apps/use-scim-to-provision-users-and-groups.md
@@ -1344,6 +1344,9 @@ Group resources are identified by the schema identifier, `urn:ietf:params:scim:s
 | objectId |ID |
 | proxyAddresses |emails[type eq "other"].Value |
 
+## Allow IP addresses used by the Azure AD provisioning service to make SCIM requests
+Certain apps allow inbound traffic to their app. In order for the Azure AD provisioning service to function as expected, the IP addresses used must be allowed. For a list of IP addresses for each service tag/region, see the JSON file - [Azure IP Ranges and Service Tags – Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519). You can download and program these IPs into your firewall as needed. The reserved IP ranges for for Azure AD provisioning can be found under "AzureActiveDirectoryDomainServices."
+ 
 
 ## Related articles
 * [Automate User Provisioning/Deprovisioning to SaaS Apps](user-provisioning.md)
