W-22454114 IP Allowlisting Connected Apps Note

modules/ROOT/pages/mq-connected-apps.adoc

@@ -1,9 +1,13 @@
-= Configuring Connected Apps
+= Configuring Connected Apps for Anypoint MQ
 
-The Connected Apps feature enables you to integrate external applications with Anypoint Platform by providing access to those applications without sharing your user credentials.
+Connected apps provide secure, credential-free access to Anypoint MQ for external applications and Mule integrations. After creating a connected app in Access Management, use the generated client ID and secret to authenticate Anypoint MQ Connector in Anypoint Studio or to obtain an access token for the Anypoint MQ API.
 
-When you create a connected app, Access Management lists the ID and secret for the app.
-You use the ID and secret values when configuring Anypoint Connector for MQ (Anypoint MQ Connector) in a Mule app in Anypoint Studio.
+[IMPORTANT]
+====
+If your organization has IP allowlisting enabled for connected apps, you must either allowlist the outbound IPs of the runtime where your Mule app is deployed, or exempt the connected app from IP enforcement. Without one of these steps, token generation fails and your Mule flows stop processing messages.
+
+If your app runs on CloudHub without static IPs or on CloudHub 2.0 Shared Space, you must exempt the connected app. These deployment models use dynamic or shared IPs that can't be reliably allowlisted. For guidance on all deployment models and exemption steps, see xref:access-management::managing-ip-allowlists.adoc#configure-ip-allowlisting-connected-apps[Configure IP Allowlisting for Connected Apps].
+====
 
 include::partial$mq-versions.adoc[tags=mqConnectorVersion]
 For information about upgrading, see xref:anypoint-mq-connector::anypoint-mq-connector-upgrade-migrate.adoc[].