To ensure a trouble-free OnBoard experience, organizations need to be certain that requests to OnBoard and its affiliated service providers are allowed past their firewalls.

Ports used by OnBoard

OnBoard follows well-established best practices and operates primarily on established ports common to all web traffic: ports 80 and 443. These ports are known to network administrators as the ports for clear text (unencrypted) web traffic (port 80) and for secure traffic (port 443). This clear text/encrypted separation is in use by the vast majority of sites on the web and should be no surprise to any system or network administrator.

Domains to allow

Your organization's firewall will need the following list of domains added to be allowed to pass traffic to your local machines. 

These sites are:

Third-party Authentication Provider URIs

For your users to make use of third-party authentication providers (Microsoft and Google) must be allowed through as well. These domains are the official endpoints for their respective OAuth services. These are the most conservative URIs that can be allowed:

While adding the shorter Google URI https://www.google.com to the allowed sites list will work for OnBoard, it will allow all traffic that matches this shorter, less distinct pattern to flow through the firewall, potentially circumventing an organization’s network security policies. The longer, more distinct URI https://www.google.com/accounts/o8 will ensure only the OAuth endpoint traffic is allowed through.

Please get in touch with OnBoard Customer Support with any questions by submitting a ticket request or emailing help@onboardmeetings.com.