Whitelisting IP addresses and e-mail domains
Using the Eclic application
Some companies use internal firewalls preventing access to external applications. In order to login to the MyPortal console, the eECD application and other user support applications related to the eECD use case, your network needs to whitelist the following domains.
https://*.lifesciencedigihub.eu
https://cdn.jsdelivr.net (eecd web app)
https://cdnjs.cloudflare.com (eecd web app)
If not enabled, the eECD application may render wrong results or not work at all (eg you obtain a white screen, get blocked in login loops, ...). Please contact your internal system administrator or security office for further assistance.
Using the ingestion channels and API's
It is plausible that your company employs firewall rules to either permit or restrict specific IP addresses or domains. In the event that such rules are in place, for seamless connectivity to Ingestion and APIs, it is imperative to whitelist the following IP addresses. We kindly request your company's technical network team to facilitate the necessary allowances.
For testing to our Staging Environment (STG)
104.47.160.14
For connection to the Production Envrionment (PRD)
52.174.7.113
As part of the security in connecting to our API's and Ingestion channel, your API calls will need to include a JWT Token. In order to obtain this JWT token we use common Azure service through https://login.microsoftonline.com/%7btenantId%7d/oauth2/v2.0/token .
In numerous instances, Microsoft's general services are typically whitelisted. However, if this is not already the case, it becomes imperative to whitelist the specific IP addresses and ports as outlined in the provided link https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide specified under ID 56.
*.auth.microsoft.com, *.msftidentity.com, *.msidentity.com, account.activedirectory.windowsazure.com, accounts.accesscontrol.windows.net, adminwebservice.microsoftonline.com, api.passwordreset.microsoftonline.com, autologon.microsoftazuread-sso.com, becws.microsoftonline.com, ccs.login.microsoftonline.com, clientconfig.microsoftonline-p.net, companymanager.microsoftonline.com, device.login.microsoftonline.com, graph.microsoft.com, graph.windows.net, login-us.microsoftonline.com, login.microsoft.com, login.microsoftonline-p.com, login.microsoftonline.com, login.windows.net, logincert.microsoftonline.com, loginex.microsoftonline.com, nexus.microsoftonline-p.com, passwordreset.microsoftonline.com, provisioningapi.microsoftonline.com
20.20.32.0/19, 20.190.128.0/18, 20.231.128.0/19, 40.126.0.0/18, 2603:1006:2000::/48, 2603:1007:200::/48, 2603:1016:1400::/48, 2603:1017::/48, 2603:1026:3000::/48, 2603:1027:1::/48, 2603:1036:3000::/48, 2603:1037:1::/48, 2603:1046:2000::/48, 2603:1047:1::/48, 2603:1056:2000::/48, 2603:1057:2::/48