Safelist URLs and Endpoints
tip
In any rows in the following table that contain URL/endpoint designations that show North America, EU, or APAC, only safelist the URL/endpoint applicable to the server location of your Flexera One account. To do this, add these URLs and endpoints to the trusted sites of the browsers you are using with Flexera One.
For any customers that use Source IP Address Filtering, a subsection of IP addresses to safelist is included. Customers who plan to implement IP address access restrictions, refer to Managing IP Access in the Administration section of this help library.
note
Customers may be using custom domains to login to Flexera One. For example, companyname.app.flexera.com. For any customers using a custom domain to access Flexera One (instead of app.flexera.com, app.flexera.eu, or app.flexera.au), also safelist that custom domain endpoint.
In order to support the proper functioning of Flexera One, administrators should allow access to the following URLs and endpoints from their environments by adding these to the trusted sites of the browsers you are using with Flexera One.
| URLs/Endpoints | Region | Components | Description | Required for all users? |
|---|---|---|---|---|
| app.flexera.com | North America | Core | Flexera One domain | Yes |
| app.flexera.eu | EU | Core | Flexera One domain | Yes |
| app.flexera.au | APAC | Core | Flexera One domain | Yes |
| docs.flexera.com | All regions | Documentation | Flexera One documentation site | Yes |
| path.flexera.com | All regions | Flexera One marketing documents | Links to Flexera marketing documents including links from splash page popovers | Yes |
| youtube.com | All regions | Flexera One marketing videos | Flexera marketing videos are hosted on YouTube | Yes |
| api.flexera.com | North America | Flexera API endpoint | Base API endpoint used across all Flexera One capabilities | Yes |
| api.flexera.eu | EU | Flexera API endpoint | Base API endpoint used across all Flexera One capabilities | Yes |
| api.flexera.au | APAC | Flexera API endpoint | Base API endpoint used across all Flexera One capabilities | Yes |
| login.flexera.com | North America | Identity access management (IAM) | The base identity access management | Yes |
| login.flexera.eu | EU | Identity access management (IAM) | The base identity access management | Yes |
| login.flexera.au | APAC | Identity access management (IAM) | The base identity access management | Yes |
| login.flexera.com/oidc/token | North America | SBOM Management | URL for obtaining a refresh token for SBOM Management REST API | Yes |
| secure.flexera.com | North America | OKTA | The base OKTA endpoint Note: The *.oktacdn.com domain is used to load scripts and assets on secure.flexera.com, secure.flexera.eu, and secure.flexera.au. | Yes |
| secure.flexera.eu | EU | OKTA | Yes | |
| secure.flexera.au | APAC | OKTA | Yes | |
| *.oktacdn.com | All Regions | OKTA | Scripts and assets for OKTA endpoints | Yes |
| global-services-lb0.rightscale.com grs-front.iam-us-east-1.flexeraeng.com acl-front.iam-us-east-1.flexeraeng.com | North America | Organization/user privileges | Base endpoints for organizations, users, and privileges information including users, groups, and accounts in the Administration section | Yes |
| grs-front.eu-central-1.iam-eu.flexeraeng.com | EU | Organization/user privileges | Yes | |
| grs-front.ap-southeast-2.iam-apac.flexeraeng.com acl-front.ap-southeast-2.iam-apac.flexeraeng.com | APAC | Organization/user privileges | Yes | |
| my.rightscale.com | All Regions | Cloud Cost Optimization | Used for Flexera One Cloud Cost Optimization functionality | No |
| optima.rightscale.com | All Regions | Cloud Cost Optimization billing centers | Used for billing centers tabs in the administration section | No |
| front.us-east-1.cloudexplorer.flexeraeng.com | North America / US-East | Cloud Cost Optimization credentials and resource browser | Used for Cloud Cost Optimization credentials, Cloud resource browser functionality | No |
| front.us-west-2.cloudexplorer.flexeraeng.com | North America / US-West | Cloud Cost Optimization credentials and resource browser | Used for Cloud Cost Optimization credentials, Cloud resource browser functionality | No |
| front.credentials-eu.flexeraeng.com | EU | Cloud Cost Optimization credentials and resource browser | Used for Cloud Cost Optimization credentials, Cloud resource browser functionality | No |
| front.credentials-apac.flexeraeng.com | APAC | Cloud Cost Optimization credentials and resource browser | Used for Cloud Cost Optimization credentials, Cloud resource browser functionality | No |
| api.optima.flexeraeng.com | North America | Cloud Cost Optimization API | Used for loading Cloud Cost Optimization API endpoints | No |
| api.optima-eu.flexeraeng.com | EU | Cloud Cost Optimization API | Used for loading Cloud Cost Optimization API endpoints | No |
| api.optima-apac.flexeraeng.com | APAC | Cloud Cost Optimization API | Used for loading Cloud Cost Optimization API endpoints | No |
| onboarding.rightscale.com | All Regions | Cloud Cost Optimization and Automation | Used for Flexera One Cloud Cost Optimization and Automation functionality | No |
| embeddedanalytics.flexera.com | North America | Data Analytics | Used for IT Visibility and SaaS Management | No |
| embeddedanalytics.flexera.eu | EU | Data Analytics | Used for IT Visibility and SaaS Management | No |
| embeddedanalytics.flexera.au | APAC | Data Analytics | Used for IT Visibility and SaaS Management | No |
| rum-collectors.us1.sumologic.com | All Regions | Data Analytics | Sumo Logic Real User Monitoring used for website diagnostics and performance monitoring | No |
| api.fsm.flexeraeng.com | North America | SaaS Management | Used for Flexera One SaaS Management functionality | No |
| api.fsm-eu.flexeraeng.com | EU | SaaS Management | Used for Flexera One SaaS Management functionality | No |
| api.fsm-apac.flexeraeng.com | APAC | SaaS Management | Used for Flexera One SaaS Management functionality | No |
| governance-3.rightscale.com | North America | Automation | Used for Flexera One Automation functionality | No |
| api.eu-central-1.policy-eu.flexeraeng.com | EU | Automation | Used for Flexera One Automation functionality | No |
| api.automation-apac.flexeraeng.com | APAC | Automation | Used for Flexera One Automation functionality | No |
| acl-front.eu-central-1.iam-eu.flexeraeng.com | All Regions | ACL | ACL endpoint used for access checks and privilege reports for EU users | No |
| slo.app.flexera.com | North America | IT Asset Management | The required base endpoint to ensure IT Asset Management functionality is available through Flexera One | No |
| slo.app.flexera.eu | EU | IT Asset Management | The required base endpoint to ensure IT Asset Management functionality is available through Flexera One | No |
| slo.app.flexera.au | APAC | IT Asset Management | The required base endpoint to ensure IT Asset Management functionality is available through Flexera One | No |
| slo-uat.app.flexera.com | North America | IT Asset Management UAT | The required base endpoint for the IT Asset Management User Acceptance Testing (UAT) environment | No |
| slo-uat.app.flexera.eu | EU | IT Asset Management UAT | The required base endpoint for the IT Asset Management User Acceptance Testing (UAT) environment | No |
| slo-uat.app.flexera.au | APAC | IT Asset Management UAT | The required base endpoint for the IT Asset Management User Acceptance Testing (UAT) environment | No |
| beacon.flexera.com us-west-2.beacons.flexeraeng.com | North America | IT Visibility beacons / Integration of IT Visibility with ServiceNow | IT Visibility beacon endpoint.This is also used for import from ServiceNow into IT Visibility.For the configuration of IT Asset Management beacons, see Ports and URLs for Inventory Beacons. | No |
| beacon.flexera.eu eu-central-1.beacon-eu.flexeraeng.com | EU | IT Visibility beacons / Integration of IT Visibility with ServiceNow | IT Visibility beacon endpoint.This is also used for import from ServiceNow into IT Visibility.For the configuration of IT Asset Management beacons, see Ports and URLs for Inventory Beacons. | No |
| beacon.flexnetmanager.au | APAC | IT Visibility beacons / Integration of IT Visibility with ServiceNow | IT Visibility beacon endpoint.This is also used for import from ServiceNow into IT Visibility.For the configuration of IT Asset Management beacons, see Ports and URLs for Inventory Beacons. | No |
| auth.split.io sdk.split.io events.split.io streaming.split.io | All Regions | Feature Flagging | Feature flagging for customer benefit and feedback | Yes |
| cdn.trackjs.com capture.trackjs.com usage.trackjs.com fault.trackjs.com | All Regions | Error Tracking | JavaScript error tracking tool to aid in customer support | Yes |
www.google-analytics.com googletagmanager.com | All Regions | User Analytics | Optional endpoints to support Google Analytics to make the Flexera One platform better for users. These scripts are implemented when a user accepts cookies. | No |
| bam.nr-data.net js-agent.newrelic.com | All Regions | Error Management | Optional endpoints to support New Relic's full stack observability on errors. These scripts are implemented when a user accepts cookies. | No |
https://secure.flexera.com/sso/saml2/<Identifier> | North America | Troubleshooting Group Membership Sync Problems | For help troubleshooting if the group membership is not synchronized as expected. In the Developer Tools, identify the POST request applicable to your region.For more information, see the "Troubleshooting Group Membership Sync Problems" subsection of Administration Setup of Group Sync. | No |
https://secure.flexera.eu/sso/saml2/<Identifier> | EU | Troubleshooting Group Membership Sync Problems | No | |
https://secure.flexera.au/sso/saml2/<Identifier> | APAC | Troubleshooting Group Membership Sync Problems | No | |
| content.flexeraone.flexera.com | North America | User Analytics, User Feedback, In-App Communication | Optional endpoints to support Pendo integration for user analytics, user feedback, and in-app communications | No |
| content.flexeraeu.flexera.com | EU | User Analytics, User Feedback, In-App Communication | Optional endpoints to support Pendo integration for user analytics, user feedback, and in-app communications | No |
| Power BI endpoints to safelist---See the Microsoft documentation topic, Add Power BI URLs to your allowlist, and at a minimum, add all endpoints listed in the following sections: General site usage and Power BI visuals | All Regions | Power BI | Power BI integration endpoints | No |
Source IP Address Filtering
note
You only need to update the safelist listed in this section if Flexera One is making outbound connections to your systems, and you currently safelist IPs for those connections. For example:
-
IT Visibility and IT Asset Management customers who have connected their Flexera One service with ServiceNow using IP addresses should update the list of IP addresses allowed to access their ServiceNow instances.
-
Cloud Cost Optimization customers that use policies should update their safelist to allow the policies to connect to their infrastructure.
The following table of IP addresses are for outbound traffic from Flexera One to customer systems whereby a Flexera system (sourced from one of the possible regions) may initiate a request into your environment. If you are performing source IP address filtering, then you will need to permit the listed source addresses on your network firewall based on your region, where the region domains are:
- North America—https://app.flexera.com
- EU—https://app.flexera.eu
- APAC—https://app.flexera.au
| IP Addresses | Region | Components | Description |
|---|---|---|---|
| 52.88.53.106 34.212.183.202 54.81.246.227 3.219.67.22 | North America | Core | Flexera One domain |
| 18.158.34.91 3.67.183.56 | EU | Core | Flexera One domain |
| 3.104.184.61 13.237.115.85 | APAC | Core | Flexera One domain |
| 185.109.134.0/24 | North America | Automation | These CIDR IP ranges are used by our Automation capability, so that external systems can be configured to allow our systems access to the necessary details using a trusted IP addresses range. Use the CIDR IP range for the Flexera One region your organization is hosted in. Best Practice:We recommend you allow the entire IP address range in your network since we change the IP addresses quite often. We will always choose the IP addresses from the region-based CIDR notations to ensure your integrations operate securely without any interruptions. |
| 185.109.135.0/24 | EU | Automation | |
| 185.109.132.0/24 | North America | Flexera One API | These CIDR IP ranges are used by Flexera One API endpoints, so that external systems can be configured to allow our systems access to the necessary details using a trusted IP addresses range. Use the CIDR IP range for the Flexera One region your organization is hosted in. Best Practice:We recommend you allow the entire IP address range in your network since we change the IP addresses quite often. We will always choose the IP addresses from the region-based CIDR notations to ensure your integrations operate securely without any interruptions. |
| 185.109.133.0/24 | EU | Flexera One API | |
| 91.198.117.0/24 | APAC | Flexera One API |