I am not able to publish the ADF pipeline from home

Question

whenever I am trying to publish the a pipeline getting error Client IP not authorized to access the API. Please ensure you are on corpnet, or that your IP is on an allowlist for the activities in your pipeline.

surprisingly same thing works from my office.

in both cases I am using azure vpn

Answer 1

Based on this old thread :

It seems like you are using the scope activity. Scope is an Microsoft internal facing activity and due to security requirements, it can only be run from within Microsoft IP addresses. To use Scope Activity, user will have to add a GlobalParameter to their factory { “name” : “ADFScopeSupport”, “value” : “true” }. After this global parameter is added, all calls to their factory must originate from Microsoft IP addresses (GET calls are still allowed), if not they will fail with the error “Client IP not authorized to access the API. ClientIPNotAuthorized”.

Answer 2

Hello bhakti khode,

Please note that VPN connections are NOT considered to be within Corpnet.

If you need to access IP restricted data factories remotely, you may be able to route traffic to management.azure.com over your corpnet VPN connection. Keep in mind this can fix ADF access but cause other issues so proceed with caution:

1. Open an administrative command prompt
2. Run 'nslookup management.azure.com ' and make note of the IP address listed
3. Run 'ipconfig' to get your MSFTVPN IP address
4. Add a route rule to force all traffice to management.azure.com via VPN with 'route -p add <<nslookupip>> mask 255.255.255.255 <<Your MSFTVP IPv4 address>>'
5. Test access to Data Factory in an InPrivate window to avoid caching issues

If this causes any issues, you can undo this by running 'route -p delete <<nslookupip>>'

Alternatively, you can get reliable access to ADF via a Remote Desktop.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.