Domains to whitelist for accessing the Cloudi-Fi captive portal and enabling authentication (based on your chosen authentication method).
What is a walled garden?
A Walled Garden is a list of network destinations (URLs or IP addresses) that users can access without authentication.
Authorize unauthenticated users to access to allow selected domains to access the Cloudi-Fi captive portal
During the Cloudi-Fi integration with your infrastructure, you have to authorize unauthenticated users to access to following domains to allow them to access the Cloudi-Fi captive portal.
login.cloudi-fi.net
login-cn.cloudi-fi.net
guest-api-v1.cloudi-fi.net
cdn.cloudi-fi.net
*.cloudi-fi.net
*.cloudi-fi.com
178.33.251.41
In addition, depending on the authentification methods you have enabled on your captive portal, you may have to add domains in the Walled garden ranges.
Add Facebook domains in the walled garden ranges
facebook.com
*.facebook.com
*.fbcdn.net
*.akamaihd.net
*.akamai.net
*.edgecastcdn.net
Add Linkedin domains in the walled garden ranges
linkedin.com
*.linkedin.com
*.licdn.com
Add X (Twitter) domains in the walled garden ranges
twitter.com
*.x.com
*.twitter.com
*.twimg.com
*.fastly.net
*.licdn.net
*.cloudfront.net
Add TikTok domains in the walled garden ranges
tiktok.com
*.tiktok.com
tiktokcdn.com
*.tiktokcdn.com
m.tiktok.com
www.tiktok.com
log.tiktok.com
Add Pinterest domains in the walled garden ranges
*pinterest.com
*pinimg.com
Connecting a Pinterest account to an existing Facebook or Google account is possible in the login box displayed during login. To allow this operation, adding the walled garden entries for Facebook or Google is necessary.
Add Stripe domains in the walled garden ranges
api.stripe.com
checkout.stripe.com
files.stripe.com
js.stripe.com
m.stripe.com
m.stripe.network
q.stripe.com
Add Azure AD domains in the walled garden ranges
*.microsoftonline.com
*.live.com
*.msftauth.net
*.microsoft.com
*.msauth.net
*.msauthimages.net
Add Okta domains in the walled garden ranges
*.oktacdn.com
*.okta.com
*.typekit.net
Add Onelogin domains in the walled garden ranges
*.onelogin.com
Add Kakao domains in the walled garden ranges
*.kakao.com
*.daumcdn.net
*.kakaocdn.net
*.daum.net
Add Ping Identity domains in the walled garden ranges
*.pingidentity.com
*.pingone.com
*.auth.pingone.com
*.pingid.com
Add Google domains in the walled garden ranges
accounts.google.com*.gstatic.comapis.google.com*.googleapis.com
Additionally, include the local domain corresponding to your region(s), such as:
accounts.google.fr(France)accounts.google.co.uk(United Kingdom)
If your authentication method does not appear in the list, do not hesitate to contact Cloudi-Fi support (who will provide you with the needed extra domains).