Office 365 Germany endpoints

Summary:    Office 365 requires connectivity to the Internet. The endpoints below should be reachable for customers using Office 365 Germany plans only.

Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 9/29/2017 - RSS List of changes to the Office 365 Germany endpoints

Office 365 requires internet connectivity from every computer connecting to the service, this article serves as a reference for the specific Microsoft and third-party endpoints computers need to be able to reach. Start with our guide managing Office 365 endpoints to understand how best to use the information here. Except for emergency changes, endpoints are updated at the end of each month.

Important: Destination endpoints may be listed as an IP addresses only, FQDN/URI only, or a combination of the two. Some endpoints are shared within Office 365 and some are shared with consumer services. Pay attention to the introduction for each service, specific guidance that applies only to that service will be included there. Office 365 depends on internet based services such as Microsoft owned cloud services with dynamic addressing, Domain Name Services (DNS), Content Delivery Networks (CDN), Certificate Revocation Lists (CRL), and other third party services where no IP addresses are available. Where IP or FQDN information is not available, we've marked them as Not Available (N/A) in the tables below.

Every Office 365 service depends on the required endpoints in the Office 365 portal and shared and Office 365 authentication and identity sections to function. The other endpoints are grouped to make selective service decisions.

Changes for each Office 365 service are combined and published at the end of each month. Occasionally emergency changes will occur outside of the end of month publishing. Expect changes three business days prior to the last business day of the month. You can always refer to the list of changes to the Office 365 Germany endpoints

There's a lot of information on this page, can we present it to you in a simpler way?

Please consider voicing your thoughts at the bottom of this page, under the heading Was this information helpful? Click yes or no and enter detailed feedback. The more feedback we get from you the easier it will be for us to improve the page.

Service

IPv4 addresses

IPv6 addresses

Destination FQDNs

Endpoint resides in a Microsoft German cloud datacenter?

Port

Portal and shared

51.4.71.0/24
51.5.71.0/24
51.4.70.0/24
51.5.70.0/24
51.4.70.0/24
51.5.70.0/24
51.4.230.178/32
51.5.147.48/32
51.5.245.67/32
51.4.227.178/32

N/A

*.onmicrosoft.de

portal.office.de

*.osi.office.de

www.office.de

office.de

yes

TCP 80 & 443

Portal and shared signup

N/A

N/A

cegsignup.microsoft.de

negsignup.microsoft.de

yes

TCP 80 & 443

Portal and shared

N/A

N/A

agent.office.de

commerceapi.office.de

clientlog.portal.office.de

videoplayer.osi.office.net

<guid>.cloudfront.net

prod.msocdn.de

shellprod.msocdn.de

r1.res.office365.com

no

TCP 80 & 443

Portal and shared DNS

N/A

N/A

*.office.de.akadns.net

*.windows.de.nsatc.net

*.de.msods.nsatc.net

officehome.msocdn.de

no

TCP 80 & 443

Certificate services

N/A

N/A

*.d-trust.net

no

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination FQDNs

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office 365 authentication and identity

51.4.70.0/24
51.5.70.0/24
51.4.136.0/24
51.5.136.0/24
51.4.144.0/24
51.5.144.0/24

N/A

sts.cloudapi.de

login.cloudapi.de

accesscontrol.cloudapi.de

logincert.microsoftonline.de

graph.cloudapi.de

pas.cloudapi.de

passwordreset.activedirectory.microsoftazure.de

companymanager.microsoftonline.de

becws.microsoftonline.de

directoryProvisioning.cloudapi.de

syncservice.microsoftonline.de

adminwebservice.microsoftonline.de

provisioningapi.microsoftonline.de

adminwebservice.microsoftonline.de

provisioningapi.microsoftonline.de

login.microsoftonline.de

device.login.microsoftonline.de

msoid.<tenantdomain>

yes

TCP 80 & 443

Office 365 authentication and identity

N/A

N/A

*.cloudapi.de

*.azurecloudapp.de

*.windows.de

microsoftonline.de

decloudapi.net

decloudapp.net

decloudapi.de

windowsazure.de

yes

TCP 80 & 443

Office 365 authentication and identity CDNs

N/A

N/A

secure.aadcdn.microsoftonline-p.com

no

TCP 80 & 443

AAD Connect

N/A

N/A

*.microsoftonline.de

*.windows.net

yes

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Exchange Online

51.4.64.0/23
51.5.64.0/23

N/A

outlook.office.de

Autodiscover-outlook.office.de

yes

TCP 25, 80, 143, 443, 587, 993, 995

Exchange Online CDN

N/A

N/A

r1.res.office365.com

no

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Exchange Online Protection

51.4.72.0/24
51.5.72.0/24
51.4.80.0/27
51.5.80.0/27
2a01:4180:4051:0800::/64
2a01:4180:4050:0800::/64
2a01:4180:4051:0400::/64
2a01:4180:4050:0400::/64

*.protection.outlook.de

<customer domain-key>.mail.protection.outlook.de

<tenant>.mail.protection.outlook.de

yes

TCP 25 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

SharePoint Online and OneDrive for Business

51.4.66.0/23
51.5.66.0/23

N/A

*.sharepoint.de

*.svc..ms

<tenant-name>.sharepoint.de

yes

TCP 80 & 443

SharePoint Online and OneDrive for Business CDNs

N/A

N/A

shellprod.msocdn.de

Static.sharepointonline.com

spoprod-a.akamaihd.net

no

TCP 80 & 443

OneDrive for Business: update verification and download

N/A

N/A

oneclient.sfx.ms

no

TCP 80 & 443

OneDrive for Business: Determines consumer v commercial

N/A

N/A

https://officeclient.microsoft.com/config16

http://odc.officeapps.live.com/odc/emailhrd

no

TCP 80 & 443

OneDrive for Business: Oauth login with AAD

N/A

N/A

login.microsoftonline.de

yes

TCP 80 & 443

OneDrive for Business: Client push notification

N/A

N/A

wns.windows.com

no

TCP 80 & 443

OneDrive for Business: supportability and telemetry

N/A

N/A

mobile.pipe.aria.microsoft.com

ssw.live.com

watson.telemetry.microsoft.com

no

TCP 80 & 443

OneDrive for Business: Office integration

N/A

N/A

odc.osi.office.de

yes

TCP 80 & 443

OneDrive for Business: Office integration

N/A

N/A

officeapps.live.com

no

TCP 80 & 443

SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents

N/A

N/A

*.search.production.de.azuretrafficmanager.de

yes

443

SharePoint Hybrid Search - Endpoint to SearchContentService to successfully authenticate to remote farm with OAuth authentication and authorization. The authorization server in this scenario is Microsoft Azure Access Control Service (ACS).

N/A

N/A

login.microsoftonline.de

yes

443

SharePoint Hybrid Search - Required for onboarding script to connect to Office 365 Provisioning Web Services. As a part of script execution adds the Office 365 Service Principal ID to the local farm and sets the correct Service Principal Name in Azure AD for the on-premises URL. This ensures that the outbound query federation can occur between the Office 365 tenant and the on-premises farm

N/A

N/A

provisioningapi.microsoftonline.de

yes

443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Skype for Business Online

51.4.68.0/26
51.4.68.128/25
51.5.69.0/26
51.5.69.128/25
2a01:4180:4040:2::/64
2a01:4180:4040:1::/64
2a01:4180:4040:8::/64 
2a01:4180:4040:7::/64

*.germeetings.skype.de

*.infra.skype.de

*.online.skype.de

*.resources.skype.de

yes

TCP 80, 443, 5061, 50000-59999 & UDP 3478, 50000-59999

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Online

51.4.144.200/32

51.5.149.3/32

N/A

*.online.office.de

broadcast.online.office.de

excel.online.office.de

onenote.online.office.de

powerpoint.online.office.de

view.online.office.de

visio.online.office.de

word-edit.online.office.de

word-view.online.office.de

yes

TCP 443

Office Online CDN

N/A

N/A

broadcast.cdn.office.de

excel.cdn.office.de

onenote.cdn.office.de

powerpoint.cdn.office.de

officeapps.cdn.office.de

view.cdn.office.de

visio.cdn.office.de

word-edit.cdn.office.de

word-view.cdn.office.de

no

TCP 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office 365 ProPlus

51.4.144.41
51.4.144.174
51.4.145.38
51.4.147.81
51.5.147.242
51.4.147.233
51.4.148.12
51.5.149.123
51.5.149.100
51.5.149.119
51.5.149.180
51.5.149.186
51.4.150.145

N/A

ols.osi.office.de

pptcs.osi.office.de

pptps.osi.office.de

wordcs.osi.office.de

wordps.osi.office.de

excelcs.osi.office.de

excelps.osi.office.de

arms.osi.office.de

plattest.osi.office.de

manage.osi.office.de

scram.office.osi.de

ols.office.osi.de

omexdiagnostics.osi.office.de

omexdatastore.osi.office.de

retailer.osi.office.de

yes

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Mobile

N/A

N/A

store.office.de

osi.office.de

sharepoint.de

microsoftonline.de

graph.microsoft.de

https://odc.osi.office.de/odc/help/clientdeveloper

https://excelcs.osi.office.de/xlauto/excelautomation.svc/XlAutomation

https://excelcs.osi.office.de/xlauto/excelautomation.svc/rest

https://excelps.osi.office.de/exlps/excelprint.svc/exlPrint

https://pptcs.osi.office.de/pptauto/PowerpointAutomation.svc/PptAutomation

https://pptcs.osi.office.de/pptauto/PowerpointAutomation.svc/rest

https://pptps.osi.office.de/pptps/powerpointprint.svc/PptPrint

https://wordcs.osi.office.de/wordauto/wordautomation.svc/wordautomation

https://wordcs.osi.office.de/wordauto/wordautomation.svc/rest

https://wordps.osi.office.de/wrdps/wordprint.svc/wrdprint

https://wordsgs.osi.office.de/wordsgs/WordSuggestionService.svc/WordSuggestion

https://roaming.osi.office.de/rs/RoamingSoapService.svc

https://odc.osi.office.de/odc/emailhrd

https://odc.osi.office.de/odc/insertmedia

https://ols.osi.office.de/

https://ols.osi.office.de/olsc/OlsClient.svc/OlsClient

https://ocws.osi.office.de/ocs/docs/recent

https://ocws.osi.office.de/ocs/docs/sharedwithme

https://ocws.osi.office.de/ocs/locations/recent

https://odc.osi.office.de/odc/servicemanager/manageserviceredir.aspx

https://odc.osi.office.de/odc/servicemanager/liveredir

https://odc.osi.office.de/odc/servicemanager/catalog

https://odc.osi.office.de/odc/servicemanager/serviceadd

https://odc.osi.office.de/odc/servicemanager/servicedetails

https://odc.osi.office.de/odc/servicemanager/serviceremove

https://odc.osi.office.de/odc/servicemanager/reportserviceerror

https://odc.osi.office.de/odc/servicemanager/v{0}/sites

https://odc.osi.office.de/odc/servicemanager/userconnected

yes

TCP 80 & 443

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Mobile

N/A

N/A

office15client.microsoft.com

odc.officeapps.live.com

odcsm.officeapps.live.com

roaming.officeapps.live.com

o15.officeredir.microsoft.com

office.microsoft.com

officeimg.vo.msecnd.net

no

TCP 80 & 443

(Back Home)

Expand your skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×