防火墙配置
在企业的网络环境中,可能会使用防火墙或代理服务器等安全策略。为了正常使用腾讯统一身份,可将以下 URL 与出口 IP 添加到防火墙的白名单中。
对外域名
常用对外域名
以下为腾讯统一身份常用对外域名地址,您可根据使用用途进行选择配置到防火墙的白名单中。
| 域名 | 端口 | 协议 | 描述 | 用途 |
|---|---|---|---|---|
| {企业域名}.account.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 企业sso登录页面 |
| account.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 非sso登录页面 |
| api.account.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 登录相关后台接口 |
| oauth2.account.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 登录接入域名 |
| {企业域名}.workspace.tencent.com | 443 | TCP | 管理后台-腾讯统一身份 | 管理后台 |
| workspace.tencent.com | 443 | TCP | 管理后台-腾讯统一身份 | 管理后台 |
| api.workspace.tencent.com | 443 | TCP | 管理后台-腾讯统一身份 | 后台接口 |
| oauth2.workspace.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 登录接入域名 |
| relay.oneid.tencent.com | 5671/5672 | TCP | 登录/数据同步-腾讯统一身份 | 使用AD、OpenLDAP等客户内网部署的认证或数据同步时才需要 |
| login.identity.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 使用钉钉认证时才需要 |
| identity.tencent.com | 443 | TCP | 管理后台-腾讯统一身份 | 在线帮助, CDN |
| report.meeting.tencent.com | 443 | TCP | 数据埋点 | 用于统计埋点数据上报(建议配置,便于售后运维) |
| report.calendar.tencent.com | 443 | TCP | 数据埋点 | 统计埋点数据上报(建议配置,便于售后运维) |
| galileotelemetry.tencent.com | 443 | TCP | 运维监控 | 服务监控(建议配置,便于售后运维) |
| cloud.tencent.com | 443 | TCP | 腾讯云认证 | 腾讯云身份认证 |
| faceid.qq.com | 443 | TCP | 人脸识别 | 管理端人脸核验 |
| captcha.gtimg.com | 443 | TCP | teg滑块 | 登录、二次验证等过程中防水墙(必须配置) |
| t.captcha.qq.com | 443 | TCP | teg滑块 | 登录、二次验证等过程中防水墙(必须配置) |
| turing.captcha.qcloud.com | 443 | TCP | 腾讯云滑块 | 登录、二次验证等过程中防水墙(必须配置) |
| turing.captcha.gtimg.com | 443 | TCP | 腾讯云滑块 | 登录、二次验证等过程中防水墙(必须配置) |
泛域名
如您使用的场景比较多,也可以通过泛域名地址进行配置。
| 泛域名 | 端口 | 协议 | 描述 | 用途 |
|---|---|---|---|---|
| *.account.tencent.com | 443 | TCP | sso登录资源-腾讯统一身份 | 主要用于登录相关功能配置 |
| *.workspace.tencent.com | 443 | TCP | sso登录资源-腾讯统一身份 | 主要用于管理后台相关功能 |
| *.identity.tencent.com | 443 | TCP | sso登录-腾讯统一身份 | 主要用于钉钉登录、在线文档和CDN相关功能 |
可信IP
使用第三方认证源 SSO 登录或使用第三方数据源同步账号到「腾讯统一身份」时,如果第三方认证源/数据源服务(如企业自己的认证服务,或私有化企微服务)对访问 IP 有白名单限制时,需要将「腾讯统一身份认证服务」的云端出口 IP 配置到第三方认证源/数据源 IP 白名单中。
可信IP地址如下: 注意:由于业务需要,腾讯统一身份将不定期更新IP池:
1124.220.125.103,2124.220.125.106,3124.220.125.108,4124.220.125.109,5124.220.125.11,6124.220.125.12,7159.75.163.166,8159.75.163.185,9159.75.163.91,1043.144.107.100,1143.144.107.112,1243.144.107.117,133.144.107.19,1443.144.107.190,1543.144.107.196,1643.144.107.199,1743.144.107.2,1843.144.107.203,1943.144.107.206,2043.144.107.214,2143.144.107.219,2243.144.107.223,2343.144.107.227,2443.144.107.231,2543.144.107.239,2643.144.107.245,2743.144.107.250,2843.144.107.251,2943.144.107.252,3043.144.107.33,3143.144.107.35,3243.144.107.43,3343.144.107.48,3443.144.107.5,3543.144.107.54,3643.144.107.55,3743.144.107.56,3843.144.107.57
为了方便您复制,OneID针对典型应用提供符合应用格式复制方式。
钉钉开放平台中「安全设置-服务器出口IP」一键复制
1124.220.125.103,124.220.125.106,124.220.125.108,124.220.125.109,124.220.125.11,124.220.125.12,159.75.163.166,159.75.163.185,159.75.163.91,43.144.107.100,43.144.107.112,43.144.107.117,43.144.107.19,43.144.107.190,43.144.107.196,43.144.107.199,43.144.107.2,43.144.107.203,43.144.107.206,43.144.107.214,43.144.107.219,43.144.107.223,43.144.107.227,43.144.107.231,43.144.107.239,43.144.107.245,43.144.107.250,43.144.107.251,43.144.107.252,43.144.107.33,43.144.107.35,43.144.107.43,43.144.107.48,43.144.107.5,43.144.107.54,43.144.107.55,43.144.107.56,43.144.107.57
飞书开放平台中「安全设置-IP白名单」一键复制
1124.220.125.1032124.220.125.1063124.220.125.1084124.220.125.1095124.220.125.116124.220.125.127159.75.163.1668159.75.163.1859159.75.163.911043.144.107.1001143.144.107.1121243.144.107.1171343.144.107.191443.144.107.1901543.144.107.1961643.144.107.1991743.144.107.21843.144.107.2031943.144.107.2062043.144.107.2142143.144.107.2192243.144.107.2232343.144.107.2272443.144.107.2312543.144.107.2392643.144.107.2452743.144.107.2502843.144.107.2512943.144.107.2523043.144.107.333143.144.107.353243.144.107.433343.144.107.483443.144.107.53543.144.107.543643.144.107.553743.144.107.563843.144.107.57
企微开放平台中「企业可信IP」一键复制
1124.220.125.103;124.220.125.106;124.220.125.108;124.220.125.109;124.220.125.11;124.220.125.12;159.75.163.166;159.75.163.185;159.75.163.91;43.144.107.100;43.144.107.112;43.144.107.117;43.144.107.19;43.144.107.190;43.144.107.196;43.144.107.199;43.144.107.2;43.144.107.203;43.144.107.206;43.144.107.214;43.144.107.219;43.144.107.223;43.144.107.227;43.144.107.231;43.144.107.239;43.144.107.245;43.144.107.250;43.144.107.251;43.144.107.252;43.144.107.33;43.144.107.35;43.144.107.43;43.144.107.48;43.144.107.5;43.144.107.54;43.144.107.55;43.144.107.56;43.144.107.57
你也可以通过访问地址方式获取最新IP池数据
