OIDC Integration IP range

Our org is needing to test Web Messenger Authentication in our lower lanes and our sit/stage enviroment discovery urls are not accessible externally so when attempting to setup the OIDC integration it throws the failed to fetch discocery uri error.

Is there a specific IP range that OIDC integration makes requests from that we can have our security team allow to work around this? Thank you.

Hi @MLuong indeed we cannot limit the source IP address range, there’s a wider initiative based on this idea > Genesys Cloud Ideas Portal

For this particular use-case, if you need a way to build custom rules on your firewall, perhaps we should explore custom HTTP headers rather than IP-address. Feel free to create an Idea for this.
Thanks for reaching out.

Thanks for the response Angelo, rather than whitelisting IP addresses, do you know if there is a specific URL that Genesys would make this request from?

We'll do some more research on this @MLuong and get back to you.

Hey Angelo, just wanted to see if there was any update so far. Thank you!

Hello @MLuong at the moment the closest we can get to support your use-case would be to leverage ad-hoc content we added to User-Agent header: HTTP requests originating from Genesys Cloud Auth Client will include the value Genesys Auth-Client in User-Agent header.
For more advanced customization, would recommend to raise an Idea in our portal as I mentioned earlier: possible research may happen via customizable header content or TLS certificates.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.