Domains to whitelist to access the Cloudi-Fi captive portal and to enable your authentication (depending on the authentication method used).
What is a walled garden?
A Walled Garden is a list of network destinations (URLs or IP addresses) that users can access without authentication.
Authorize unauthenticated users to access to allow selected domains to access the Cloudi-Fi captive portal:
During your integration, you have to authorize unauthenticated users to access to following domains to allow them to access the Cloudi-Fi captive portal.
-
login.cloudi-fi.net
-
login-cn.cloudi-fi.net
-
guest-api-v1.cloudi-fi.net
-
cdn.cloudi-fi.net
-
*.cloudi-fi.net
-
*.cloudi-fi.com
-
178.33.251.41
In addition, depending on the authentification methods you have enabled on your captive portal, you may have to add domains in the Walled garden ranges.
Add Facebook domains in the walled garden ranges
-
facebook.com
-
*.facebook.com
-
*.fbcdn.net
-
*.akamaihd.net
-
*.akamai.net
-
*.edgecastcdn.net
Add Linkedin domains in the walled garden ranges
-
linkedin.com
-
*.linkedin.com
-
*.licdn.com
Add Twitter domains in the walled garden ranges
-
twitter.com
-
*.twitter.com
-
*.twimg.com
-
*.fastly.net
-
*.licdn.net
-
*.cloudfront.net
Add Pinterest domains in the walled garden ranges
-
*pinterest.com
-
*pinimg.com
In the login box displayed during the login, connecting a Pinterest account to an existing Facebook or Google account is possible. To allow this operation, adding the walled garden entries for Facebook or Google is necessary.
Add Stripe domains in the walled garden ranges
-
api.stripe.com
-
checkout.stripe.com
-
files.stripe.com
-
js.stripe.com
-
m.stripe.com
-
m.stripe.network
-
q.stripe.com
Add AzureAd domains in the walled garden ranges
-
*.microsoftonline.com
-
*.live.com
-
*.msftauth.net
-
*.microsoft.com
-
*.msauth.net
-
*.msauthimages.net
Add Okta domains in the walled garden ranges
-
*.oktacdn.com
-
*.okta.com
-
*.typekit.net
Add Kakao domains in the walled garden ranges
-
*.kakao.com
-
*.daumcdn.net
-
*.kakaocdn.net
-
*.daum.net
If your authentication method does not appear in the list, do not hesitate to contact Cloudi-Fi support (who will provide you with the needed extra domains).