Skip to main content
Question

List of domains to whitelist to setting up FSM OIDC

  • Jan 31, 2023 9:21 AM UTC
  • 1 reply
  • 207 views

Forum|alt.badge.img+4

Hi Experts,

 

We have a customer who is setting up OIDC SSO login (Azure AD) on a on-premise environment which have a firewall which restricts access to the internet.

Due to this they are getting 500 status code error on webclient and smart client (OIDC123). The same credentials used on another internet accessible environment it is working as expected.

 

They are asking which URLs they need to whitelist in order to get OIDC working.

 

So far they’ve whitelisted following URLs (ref)

 

*.login.microsoftonline.com

*.aadcdn.msftauth.net

*.aadcdn.msftauthimages.net

*.aadcdn.msauthimages.net

*.logincdn.msftauth.net

*.login.live.com

*.msauth.net

*.aadcdn.microsoftonline-p.com

*.microsoftonline-p.com

 

1 reply

roklde
Superhero (Employee)
Forum|alt.badge.img+27
  • Superhero (Employee)
  • Jan 31, 2023 11:39 AM UTC

Hi Nimesha,

I think you missed the following URL:

https://sts.windows.net/

The OIDC Configuration from the Azure tenant will be fetched from here. Full request URL looks like:

https://sts.windows.net/<Azure AD Tenant>/.well-known/openid-configuration 

Best regards
Roman​​​​​​​