Domains to whitelist for accessing the Cloudi-Fi captive portal and enabling authentication (based on your chosen authentication method).

What is a walled garden?

A Walled Garden is a list of network destinations (URLs or IP addresses) that users can access without authentication.

Authorize unauthenticated users to access to allow selected domains to access the Cloudi-Fi captive portal

During the Cloudi-Fi integration with your infrastructure, you have to authorize unauthenticated users to access to following domains to allow them to access the Cloudi-Fi captive portal.

login.cloudi-fi.net
login-cn.cloudi-fi.net
guest-api-v1.cloudi-fi.net
cdn.cloudi-fi.net
*.cloudi-fi.net
*.cloudi-fi.com
178.33.251.41

In addition, depending on the authentification methods you have enabled on your captive portal, you may have to add domains in the Walled garden ranges.

Social Medias

Add Facebook domains in the walled garden ranges

facebook.com
*.facebook.com
*.fbcdn.net
*.akamaihd.net
*.akamai.net
*.edgecastcdn.net

Add Linkedin domains in the walled garden ranges

linkedin.com
*.linkedin.com
*.licdn.com

Add X (Twitter) domains in the walled garden ranges

twitter.com
*.x.com
*.twitter.com
*.twimg.com
*.fastly.net
*.licdn.net
*.cloudfront.net

Add Line domains in the walled garden ranges

*.line.me
*.line-scdn.net

Add TikTok domains in the walled garden ranges

tiktok.com
*.tiktok.com
tiktokcdn.com
*.tiktokcdn.com
m.tiktok.com
www.tiktok.com
log.tiktok.com

Add Pinterest domains in the walled garden ranges

*pinterest.com
*pinimg.com

Connecting a Pinterest account to an existing Facebook or Google account is possible in the login box displayed during login. To allow this operation, adding the walled garden entries for Facebook or Google is necessary.

Add Stripe domains in the walled garden ranges

api.stripe.com
checkout.stripe.com
files.stripe.com
js.stripe.com
m.stripe.com
m.stripe.network
q.stripe.com

SAML Integrations

Add Azure AD domains in the walled garden ranges

*.microsoftonline.com
*.live.com
*.msftauth.net
*.microsoft.com
*.msauth.net
*.msauthimages.net

Add Okta domains in the walled garden ranges

*.oktacdn.com
*.okta.com
*.typekit.net

Add Onelogin domains in the walled garden ranges

*.onelogin.com

Add Kakao domains in the walled garden ranges

*.kakao.com
*.daumcdn.net
*.kakaocdn.net
*.daum.net

Add Ping Identity domains in the walled garden ranges

*.pingidentity.com
*.pingone.com
*.auth.pingone.com
*.pingid.com

Add Google domains in the walled garden ranges

accounts.google.com
*.gstatic.com
apis.google.com
*.googleapis.com

Additionally, include the local domain corresponding to your region(s), such as:

accounts.google.fr
accounts.google.co.uk

If your authentication method does not appear in the list, do not hesitate to contact Cloudi-Fi support (who will provide you with the needed extra domains).