Safelist URLs and Endpoints
Tip:
For any customers that use Source IP Address Filtering, a subsection of IP addresses to safelist is included.
In order to support the proper functioning of Flexera One, administrators should allow access to the following URLs and endpoints from their environments by adding these to the trusted sites of the browsers you are using with Flexera One.
|
URLs/Endpoints |
Region |
Components |
Description |
Required for all users? |
||||||
|
app.flexera.com |
North America |
Core |
Flexera One domain |
Yes |
||||||
|
app.flexera.eu |
EU |
|||||||||
|
app.flexera.au |
APAC |
|||||||||
|
docs.flexera.com |
All regions |
Documentation |
Flexera One documentation site |
Yes |
||||||
|
path.flexera.com |
All regions |
Flexera One marketing documents |
Links to Flexera marketing documents including links from splash page popovers |
Yes |
||||||
|
youtube.com |
All regions |
Flexera One marketing videos |
Flexera marketing videos are hosted on YouTube |
Yes |
||||||
|
api.flexera.com |
North America |
Flexera API endpoint |
Base API endpoint used across all Flexera One capabilities |
Yes |
||||||
|
api.flexera.eu |
EU |
|||||||||
|
api.flexera.au |
APAC |
|||||||||
|
login.flexera.com |
North America |
Identity access management (IAM) |
The base identity access management |
Yes |
||||||
|
login.flexera.eu |
EU |
|||||||||
|
login.flexera.au |
APAC |
|||||||||
|
login.flexera.com/oidc/token |
North America |
SBOM Management |
URL for obtaining a refresh token for SBOM Management REST API |
Yes |
||||||
|
secure.flexera.com |
North America |
OKTA |
The base OKTA endpoint Note:The *.oktacdn.com domain is used to load scripts and assets on secure.flexera.com, secure.flexera.eu, and secure.flexera.au. |
Yes |
||||||
|
secure.flexera.eu |
EU |
|||||||||
|
secure.flexera.au |
APAC |
|||||||||
|
*.oktacdn.com |
All Regions |
|||||||||
|
global-services-lb0.rightscale.com grs-front.iam-us-east-1.flexeraeng.com acl-front.iam-us-east-1.flexeraeng.com |
North America |
Organization/user privileges |
Base endpoints for organizations, users, and privileges information including users, groups, and accounts in the Administration section |
Yes |
||||||
|
grs-front.eu-central-1.iam-eu.flexeraeng.com |
EU |
|||||||||
|
grs-front.ap-southeast-2.iam-apac.flexeraeng.com acl-front.ap-southeast-2.iam-apac.flexeraeng.com |
APAC |
|||||||||
|
my.rightscale.com |
All Regions |
Cloud Cost Optimization |
Used for Flexera One Cloud Cost Optimization functionality |
No |
||||||
|
optima.rightscale.com |
All Regions |
Cloud Cost Optimization billing centers |
Used for billing centers tabs in the administration section |
No |
||||||
|
front.us-east-1.cloudexplorer.flexeraeng.com |
North America / US-East |
Cloud Cost Optimization credentials and resource browser |
Used for Cloud Cost Optimization credentials, Cloud resource browser functionality |
No |
||||||
|
front.us-west-2.cloudexplorer.flexeraeng.com |
North America / US-West |
|||||||||
|
front.credentials-eu.flexeraeng.com |
EU |
|||||||||
|
front.credentials-apac.flexeraeng.com |
APAC |
|||||||||
|
api.optima.flexeraeng.com |
North America |
Cloud Cost Optimization API |
Used for loading Cloud Cost Optimization API endpoints |
No |
||||||
|
api.optima-eu.flexeraeng.com |
EU |
|||||||||
|
api.optima-apac.flexeraeng.com |
APAC |
|||||||||
|
onboarding.rightscale.com |
All Regions |
Cloud Cost Optimization and Automation |
Used for Flexera One Cloud Cost Optimization and Automation functionality |
No |
||||||
|
embeddedanalytics.flexera.com |
North America |
Data Analytics |
Used for Technology Spend, IT Visibility, and SaaS Management |
No |
||||||
|
embeddedanalytics.flexera.eu |
EU |
|||||||||
|
embeddedanalytics.flexera.au |
APAC |
|||||||||
|
api.fsm.flexeraeng.com |
North America |
SaaS Management |
Used for Flexera One SaaS Management functionality |
No |
||||||
|
api.fsm-eu.flexeraeng.com |
EU |
|||||||||
|
api.fsm-apac.flexeraeng.com |
APAC |
|||||||||
|
governance-3.rightscale.com |
North America |
Automation |
Used for Flexera One Automation functionality |
No |
||||||
|
api.eu-central-1.policy-eu.flexeraeng.com |
EU |
|||||||||
|
api.automation-apac.flexeraeng.com |
APAC |
|||||||||
|
acl-front.eu-central-1.iam-eu.flexeraeng.com |
All Regions |
ACL |
ACL endpoint used for access checks and privilege reports for EU users |
No |
||||||
|
slo.app.flexera.com |
North America |
IT Asset Management |
The required base endpoint to ensure IT Asset Management functionality is available through Flexera One |
No |
||||||
|
slo.app.flexera.eu |
EU |
|||||||||
|
slo.app.flexera.au |
APAC |
|||||||||
|
slo-uat.app.flexera.com |
North America |
IT Asset Management UAT |
The required base endpoint for the IT Asset Management User Acceptance Testing (UAT) environment |
No |
||||||
|
slo-uat.app.flexera.eu |
EU |
|||||||||
|
slo-uat.app.flexera.au |
APAC |
|||||||||
|
beacon.flexera.com us-west-2.beacons.flexeraeng.com |
North America |
IT Visibility beacons / Integration of IT Visibility with ServiceNow |
IT Visibility beacon endpoint. This is also used for import from ServiceNow into IT Visibility. For the configuration of IT Asset Management beacons, see Ports and URLs for Inventory Beacons. |
No |
||||||
|
beacon.flexera.eu eu-central-1.beacon-eu.flexeraeng.com |
EU |
|||||||||
|
beacon.flexnetmanager.au |
APAC |
|||||||||
|
auth.split.io sdk.split.io events.split.io streaming.split.io |
All Regions |
Feature Flagging |
Feature flagging for customer benefit and feedback |
Yes |
||||||
|
cdn.trackjs.com capture.trackjs.com usage.trackjs.com fault.trackjs.com |
All Regions |
Error Tracking |
JavaScript error tracking tool to aid in customer support |
Yes |
||||||
|
www.google-analytics.com googletagmanager.com |
All Regions |
User Analytics |
Optional endpoints to support Google Analytics to make the Flexera One platform better for users. These scripts are implemented when a user accepts cookies. |
No |
||||||
|
bam.nr-data.net js-agent.newrelic.com |
All Regions |
Error Management |
Optional endpoints to support New Relic’s full stack observability on errors. These scripts are implemented when a user accepts cookies. |
No |
||||||
|
North America |
Troubleshooting Group Membership Sync Problems |
For help troubleshooting if the group membership is not synchronized as expected. In the Developer Tools, identify the POST request applicable to your region. For more information, see the “Troubleshooting Group Membership Sync Problems” subsection of Administration Setup of Group Sync. |
No |
|||||||
|
https://secure.flexera.eu/sso/saml2/<Identifier> |
EU |
|||||||||
|
https://secure.flexera.au/sso/saml2/<Identifier> |
APAC |
|||||||||
|
content.flexeraone.flexera.com |
North America |
User Analytics, User Feedback, In-App Communication |
Optional endpoints to support Pendo integration for user analytics, user feedback, and in-app communications |
No |
||||||
|
content.flexeraeu.flexera.com |
EU |
|||||||||
|
Power BI endpoints to safelist—See the Microsoft documentation topic, Add Power BI URLs to your allowlist, and at a minimum, add all endpoints listed in the following sections:
|
All Regions |
Power BI |
Optional endpoints for Power BI service |
No |
Important:You only need to update the safelist listed in this section if Flexera One is making outbound connections to your systems, and you currently safelist IPs for those connections. For example:
| • | IT Visibility and IT Asset Management customers who have connected their Flexera One service with ServiceNow using IP addresses should update the list of IP addresses allowed to access their ServiceNow instances. |
| • | Cloud Cost Optimization customers that use policies should update their safelist to allow the policies to connect to their infrastructure. |
The following table of IP addresses are for outbound traffic from Flexera One to customer systems whereby a Flexera system (sourced from one of the possible regions) may initiate a request into your environment. If you are performing source IP address filtering, then you will need to permit the listed source addresses on your network firewall based on your region, where the region domains are:
| • | North America—https://app.flexera.com |
| • | EU—https://app.flexera.eu |
| • | APAC—https://app.flexera.au |
|
IP Addresses |
Region |
Components |
Description |
|
52.88.53.106 34.212.183.202 54.81.246.227 3.219.67.22 |
North America |
Core |
Flexera One domain |
|
18.158.34.91 3.67.183.56 |
EU |
||
|
3.104.184.61 13.237.115.85 |
APAC |
||
|
185.109.134.0/24 |
North America |
Automation |
These CIDR IP ranges are used by our Automation capability, so that external systems can be configured to allow our systems access to the necessary details using a trusted IP addresses range. Use the CIDR IP range for the Flexera One region your organization is hosted in. Best Practice:We recommend you allow the entire IP address range in your network since we change the IP addresses quite often. We will always choose the IP addresses from the region-based CIDR notations to ensure your integrations operate securely without any interruptions. |
|
185.109.135.0/24 |
EU |
||
|
185.109.132.0/24 |
North America |
Flexera One API |
These CIDR IP ranges are used by Flexera One API endpoints, so that external systems can be configured to allow our systems access to the necessary details using a trusted IP addresses range. Use the CIDR IP range for the Flexera One region your organization is hosted in. Best Practice:We recommend you allow the entire IP address range in your network since we change the IP addresses quite often. We will always choose the IP addresses from the region-based CIDR notations to ensure your integrations operate securely without any interruptions. |
|
185.109.133.0/24 |
EU |
||
|
91.198.117.0/24 |
APAC |