I did try your advice.        It was effective.   My application is able to read and consumer the session variable "x-forwarded-for" created using this method.   Thanks.   @zanyterp wrote: No, this cannot be done. The external user IP is not available internally. You can *try* a header policy (users>resource policies>web>sso>headers/cookies) and set the value of sourceIP or x-forwarded-for (if you have something that sets that value)     ... View more