@dan Appreciate your response and insight, and thanks for sharing the links to set this up on FusionAuth(FA). We are planning to consume FA's JWT response on Apigee and since this IP whitelisting is available on FA, we could explore few other items on Apigee. Thanks