Return
-
Title
DNS connectivity requirements for Starling products -
Description
This article outlines the DNS connectivity requirements for Starling products. -
Resolution
Note all below endpoints are https, port 443.
Recommendation for customer is to whitelist *.cloud.oneidentity.com and *.cloud.oneidentity.eu when required as hostnames can change in Starling.
Product DNS name Purpose Starling Platform (Common for all products) - account.cloud.oneidentity.com
- account.cloud.oneidentity.eu
- landing page of a Starling organization
- accountsupervisor.cloud.oneidentity.com
- accountsupervisor.cloud.oneidentity.eu
- join/unjoin a product to a Starling organization
- discovery.cloud.oneidentity.com
- discovery.cloud.oneidentity.eu
- determine correct URLs for subsequent calls based on geography
- sts.cloud.oneidentity.com
- sts.cloud.oneidentity.eu
- obtain access tokens for calling various Starling APIs
- www.cloud.oneidentity.com (cloud.oneidentity.com)
- www.cloud.oneidentity.eu (cloud.oneidentity.eu)
- public landing page of Starling services
- status.cloud.oneidentity.com
- status.cloud.oneidentity.eu
- public Starling service status page
- directory-proxy.cloud.oneidentity.com
- directory-proxy.cloud.oneidentity.eu
- API endpoint for service to access user and group information
Starling 2FA - 2faclient.cloud.oneidentity.com
- API endpoint for end-user 2FA functionality
- api.2fa.cloud.oneidentity.com
- legacy endpoint for end-user 2FA functionality
Starling Cloud Assistant - cloud-assistant.cloud.oneidentity.com
- cloud-assistant.cloud.oneidentity.eu
- landing page for Cloud Assistant UI
- cloud-assistant-supervisor.cloud.oneidentity.com
- cloud-assistant-supervisor.cloud.oneidentity.eu
- API endpoint for Cloud Assistant functionality
Starling Connect - connect.cloud.oneidentity.com
- connect.cloud.oneidentity.eu
- landing page for Connect UI
- connect-supervisor.cloud.oneidentity.com
- connect-supervisor.cloud.oneidentity.eu
- API endpoint for Connect functionality
Safeguard Remote Access - remote-access.cloud.oneidentity.com
- remote-access.cloud.oneidentity.eu
- Remote Access UI default https settings
- remote-access-api.cloud.oneidentity.com
- remote-access-api.cloud.oneidentity.eu
- Remote Access public API, required for SPS or SPP integration
Connect for Safeguard Assets - safeguardassets.cloud.oneidentity.com
- safeguardassets.cloud.oneidentity.eu
- landing page for Connect for Safeguard Assets
- safeguardassets-supervisor.cloud.oneidentity.com
- safeguardassets-supervisor.cloud.oneidentity.eu
- API endpoint for Connect for Safeguard Assets