Edit

Power Platform URLs and IP address ranges

  • Article
  • 3 minutes to read

Microsoft Power Platform requires connectivity to the internet. The endpoints listed in this article should be reachable for customers using the Power Platform services.

Internet URLs to allow

Ensure that you have added the required URLs to the allow list to ensure communication through firewalls and other security mechanisms. If you cannot access a service or specific URLs fail to load, a proxy or firewall might be configured to prevent you from accessing server resources. Review your proxy settings and ensure that you add all the relevant URLs to the allowed list as per your service.

URLs for Power Platform services

Add the following URLs to the allow list.

Service URLs
Power Apps - Public cloud
- Government cloud
Power Automate - Public cloud
- Government cloud
Power BI - Public cloud
- Government cloud
Power Virtual Agents - Public cloud
- Government cloud

Important

If you are a customer in China and want to access Power Platform services operated by a local company that stores your data within China, go to Power Platform and Dynamics 365 apps - operated by 21Vianet in China

URLs for Dynamics 365 services

Add the following URLs to the allow list to use Dynamics 365 apps such as Dynamics 365 Sales, Dynamics 365 Customer Service, Dynamics 365 Field Service, and Dynamics 365 Marketing.

Endpoint URL Justification
http://login.microsoftonline-p.com Required for Microsoft Cloud Authentication. Includes business-to-consumer (B2C) and guest scenarios.
https://login.live.com
https://secure.aadcdn.microsoftonline-p.com
https://auth.gfx.ms
https://*.windows.net
http://*.passport.net
https://.crm#.dynamics.com and http://.crm#.dynamics.com Required for environments access. Includes integration and static Content Delivery Network (CDN) content endpoints.

Replace # in http://.crm#.dynamics.com and https://.crm#.dynamics.com with your region's number:
  • Asia/Pacific: 5
  • Canada: 3
  • Europe, Africa, and Middle East: 15 and 4
  • France: 12
  • Germany: 16
  • India: 8
  • Japan: 7
  • Korea: 21
  • North America: no number
  • Norway: 19
  • Oceania: 6
  • Singapore: 20
  • South Africa: 14
  • South America: 2
  • Switzerland: 17
  • UAE: 15
  • United Kingdom: 11
  • Dynamics 365 US Government: 9
https://*.azureedge.net
https://*.microsoftonline.com Required for authentication and Microsoft 365 services such as the Microsoft 365 admin center.
https://go.microsoft.com Required for product documentation and context-sensitive help pages.
https://urs.microsoft.com Required for Microsoft defender SmartScreen filtering.
https://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Required for Certification Revocation List checks.
https://dynamics.microsoft.com
https://*.api.powerplatform.com and https://api.powerplatform.com Required for Power Platform API connectivity used internally by Microsoft products and admin automation scenarios as documented here.
https://mem.gfx.ms Me Control is a Microsoft feature that provides a consistent way for users to do core authentication functions like signing in, switching between accounts and more.
https://www.d365ccafpi.com d365ccafpi service exposes a controller endpoint for token change to achieve client side first party integration with external service from PCF control

Important

IP addresses required

All IP addresses for various services for public and government clouds are available in these downloadable JSON files:

The IP address values in these JSON files are grouped by service tags that define the service they're applicable for.

For Power Platform and Dynamics 365 services, you must add the IP address values specified under the AzureCloud service tag. The service tags also have a regional scope to define the IP addresses required per Azure datacenter region. For example, to find out the required IP address values for accessing services in the Australia region, use the Azure IP Ranges and Service Tags – Public Cloud file, and search for AzureCloud.Australia.

PowerPlatformInfra service tag for Power Platform IPs

If you are using Power Platform connectors, see the complete list of required IP addresses in Connectors docs.

Note

Blocked IPs can also impact connecting Dynamics 365 apps to Microsoft Exchange Server (on-premises).

Ports

Dataverse exposes ports 1433 and 5558 to expose the Dataverse Tabular Data Stream.

See also

Plan for Deployment and Administration
Work with requirements as a solution architect for Power Platform and Dynamics 365