Our org is needing to test Web Messenger Authentication in our lower lanes and our sit/stage enviroment discovery urls are not accessible externally so when attempting to setup the OIDC integration it throws the failed to fetch discocery uri error.
Is there a specific IP range that OIDC integration makes requests from that we can have our security team allow to work around this? Thank you.
Hi @MLuong indeed we cannot limit the source IP address range, there’s a wider initiative based on this idea > Genesys Cloud Ideas Portal
For this particular use-case, if you need a way to build custom rules on your firewall, perhaps we should explore custom HTTP headers rather than IP-address. Feel free to create an Idea for this.
Thanks for reaching out.
Thanks for the response Angelo, rather than whitelisting IP addresses, do you know if there is a specific URL that Genesys would make this request from?
Hello @MLuong at the moment the closest we can get to support your use-case would be to leverage ad-hoc content we added to User-Agent header: HTTP requests originating from Genesys Cloud Auth Client will include the value Genesys Auth-Client in User-Agent header.
For more advanced customization, would recommend to raise an Idea in our portal as I mentioned earlier: possible research may happen via customizable header content or TLS certificates.