Update managing-allowed-ip-addresses-for-your-organization.md (#33736)

Co-authored-by: Laura Coursen <[email protected]>

Author: chiph

content/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization.md

@@ -28,6 +28,8 @@ You can restrict access to private organization assets by configuring an allow l
 
 {% data reusables.identity-and-permissions.ip-allow-lists-cidr-notation %}
 
+## About IP allow list management
+
 {% data reusables.identity-and-permissions.ip-allow-lists-enable %}
 
 If you set up an allow list you can also choose to automatically add to your allow list any IP addresses configured for {% data variables.product.prodname_github_apps %} that you install in your organization. The creator of a {% data variables.product.prodname_github_app %} can configure an allow list for their application, specifying the IP addresses at which the application runs. By inheriting their allow list into yours, you avoid connection requests from the application being refused. For more information, see "[Allowing access by {% data variables.product.prodname_github_apps %}](#allowing-access-by-github-apps)."
@@ -61,7 +63,7 @@ You can also configure allowed IP addresses at the enterprise account level, and
 
 ## Allowing access by {% data variables.product.prodname_github_apps %}
 
-If you're using an allow list, you can also choose to automatically add to your allow list any IP addresses configured for {% data variables.product.prodname_github_apps %} that you install in your organization. 
+If you're using an allow list, you can also choose to automatically add to your allow list any IP addresses configured for {% data variables.product.prodname_github_apps %} that you install in your organization.
 
 {% data reusables.identity-and-permissions.ip-allow-lists-address-inheritance %}
 

data/reusables/identity-and-permissions/ip-allow-lists-example-and-restrictions.md

@@ -1 +1,9 @@
 For example, you can allow access from only the IP address of your office network. The allow list for IP addresses will block access to private resources via the web, API, and Git from any IP addresses that are not on the allow list.
+
+Any navigation to resources protected by an IP allow list will be filtered by the list, including through:
+
+* Username and password with {% data variables.product.prodname_dotcom %} authentication or SAML SSO
+* {% data variables.product.pat_generic_caps %}
+* SSH keys
+
+All user credentials, including those belonging to administrators, are subject to IP allow list checks. IP allow lists are not enforced on traffic directed to public repositories.