F5 APM connectivity to External IDP connector

Hi All,

Do you know if we need to allow traffic from F5 to external IDP connector (in my case it is Azure AD) through firewall when Azure AD act as external IDP connector?

If so which IP address F5 uses for traffic ( management, SNAT)? What ports needs to be open?