
We would like to use Power Automate to copy files from SharePoint to an SFTP server. Currently, the SFTP connection is not working within Power Automate, and our IT security team requires the outbound source IP addresses to configure a firewall rule. Does anyone know how to identify the outbound IP addresses used by the Power Automate service for SFTP connections, or whether Microsoft provides a list of IP ranges that can be whitelisted?
You can’t rely on a single fixed outbound IP for Power Automate SFTP.
Power Automate uses dynamic, region-based IP ranges (not a single static IP)
Microsoft provides official IP ranges, but they are large and change over time
Recommended approach: use Azure Service Tags instead of manual IP whitelisting
What to do:
Whitelist Service Tags (preferred):
AzureConnectors
PowerPlatformPlex
LogicApps
If IP whitelisting is required:
Download Microsoft Power Platform / Azure IP ranges (per region, e.g. Europe)
Update regularly (about every 90 days)
Expect multiple source IPs
Important:
SFTP connections may originate from multiple backend IPs
Conclusion:
No single outbound IP is available
Use Service Tags or full regional IP ranges
Alternative (if single IP is required):
Azure VNet + NAT Gateway
Integration Service Environment (ISE)
On-premises data gateway