防火墙配置

在企业的网络环境中,可能会使用防火墙或代理服务器等安全策略。为了正常使用腾讯统一身份,可将以下 URL 与出口 IP 添加到防火墙的白名单中。

对外域名

常用对外域名

以下为腾讯统一身份常用对外域名地址,您可根据使用用途进行选择配置到防火墙的白名单中。

域名端口协议描述用途
{企业域名}.account.tencent.com443TCPsso登录-腾讯统一身份企业sso登录页面
account.tencent.com443TCPsso登录-腾讯统一身份非sso登录页面
api.account.tencent.com443TCPsso登录-腾讯统一身份登录相关后台接口
oauth2.account.tencent.com443TCPsso登录-腾讯统一身份登录接入域名
{企业域名}.workspace.tencent.com443TCP管理后台-腾讯统一身份管理后台
workspace.tencent.com443TCP管理后台-腾讯统一身份管理后台
api.workspace.tencent.com443TCP管理后台-腾讯统一身份后台接口
oauth2.workspace.tencent.com443TCPsso登录-腾讯统一身份登录接入域名
relay.oneid.tencent.com5671/5672TCP登录/数据同步-腾讯统一身份使用AD、OpenLDAP等客户内网部署的认证或数据同步时才需要
login.identity.tencent.com443TCPsso登录-腾讯统一身份使用钉钉认证时才需要
identity.tencent.com443TCP管理后台-腾讯统一身份在线帮助, CDN
report.meeting.tencent.com443TCP数据埋点用于统计埋点数据上报(建议配置,便于售后运维)
report.calendar.tencent.com443TCP数据埋点统计埋点数据上报(建议配置,便于售后运维)
galileotelemetry.tencent.com443TCP运维监控服务监控(建议配置,便于售后运维)
cloud.tencent.com443TCP腾讯云认证腾讯云身份认证
faceid.qq.com443TCP人脸识别管理端人脸核验
captcha.gtimg.com443TCPteg滑块登录、二次验证等过程中防水墙(必须配置)
t.captcha.qq.com443TCPteg滑块登录、二次验证等过程中防水墙(必须配置)
turing.captcha.qcloud.com443TCP腾讯云滑块登录、二次验证等过程中防水墙(必须配置)
turing.captcha.gtimg.com443TCP腾讯云滑块登录、二次验证等过程中防水墙(必须配置)

泛域名

如您使用的场景比较多,也可以通过泛域名地址进行配置。

泛域名端口协议描述用途
*.account.tencent.com443TCPsso登录资源-腾讯统一身份主要用于登录相关功能配置
*.workspace.tencent.com443TCPsso登录资源-腾讯统一身份主要用于管理后台相关功能
*.identity.tencent.com443TCPsso登录-腾讯统一身份主要用于钉钉登录、在线文档和CDN相关功能

可信IP

使用第三方认证源 SSO 登录或使用第三方数据源同步账号到「腾讯统一身份」时,如果第三方认证源/数据源服务(如企业自己的认证服务,或私有化企微服务)对访问 IP 有白名单限制时,需要将「腾讯统一身份认证服务」的云端出口 IP 配置到第三方认证源/数据源 IP 白名单中。

可信IP地址如下: 注意:由于业务需要,腾讯统一身份将不定期更新IP池

1124.220.125.103,
2124.220.125.106,
3124.220.125.108,
4124.220.125.109,
5124.220.125.11,
6124.220.125.12,
7159.75.163.166,
8159.75.163.185,
9159.75.163.91,
1043.144.107.100,
1143.144.107.112,
1243.144.107.117,
133.144.107.19,
1443.144.107.190,
1543.144.107.196,
1643.144.107.199,
1743.144.107.2,
1843.144.107.203,
1943.144.107.206,
2043.144.107.214,
2143.144.107.219,
2243.144.107.223,
2343.144.107.227,
2443.144.107.231,
2543.144.107.239,
2643.144.107.245,
2743.144.107.250,
2843.144.107.251,
2943.144.107.252,
3043.144.107.33,
3143.144.107.35,
3243.144.107.43,
3343.144.107.48,
3443.144.107.5,
3543.144.107.54,
3643.144.107.55,
3743.144.107.56,
3843.144.107.57

为了方便您复制,OneID针对典型应用提供符合应用格式复制方式。

钉钉开放平台中「安全设置-服务器出口IP」一键复制

1124.220.125.103,124.220.125.106,124.220.125.108,124.220.125.109,124.220.125.11,124.220.125.12,159.75.163.166,159.75.163.185,159.75.163.91,43.144.107.100,43.144.107.112,43.144.107.117,43.144.107.19,43.144.107.190,43.144.107.196,43.144.107.199,43.144.107.2,43.144.107.203,43.144.107.206,43.144.107.214,43.144.107.219,43.144.107.223,43.144.107.227,43.144.107.231,43.144.107.239,43.144.107.245,43.144.107.250,43.144.107.251,43.144.107.252,43.144.107.33,43.144.107.35,43.144.107.43,43.144.107.48,43.144.107.5,43.144.107.54,43.144.107.55,43.144.107.56,43.144.107.57

飞书开放平台中「安全设置-IP白名单」一键复制

1124.220.125.103
2124.220.125.106
3124.220.125.108
4124.220.125.109
5124.220.125.11
6124.220.125.12
7159.75.163.166
8159.75.163.185
9159.75.163.91
1043.144.107.100
1143.144.107.112
1243.144.107.117
1343.144.107.19
1443.144.107.190
1543.144.107.196
1643.144.107.199
1743.144.107.2
1843.144.107.203
1943.144.107.206
2043.144.107.214
2143.144.107.219
2243.144.107.223
2343.144.107.227
2443.144.107.231
2543.144.107.239
2643.144.107.245
2743.144.107.250
2843.144.107.251
2943.144.107.252
3043.144.107.33
3143.144.107.35
3243.144.107.43
3343.144.107.48
3443.144.107.5
3543.144.107.54
3643.144.107.55
3743.144.107.56
3843.144.107.57

企微开放平台中「企业可信IP」一键复制

1124.220.125.103;124.220.125.106;124.220.125.108;124.220.125.109;124.220.125.11;124.220.125.12;159.75.163.166;159.75.163.185;159.75.163.91;43.144.107.100;43.144.107.112;43.144.107.117;43.144.107.19;43.144.107.190;43.144.107.196;43.144.107.199;43.144.107.2;43.144.107.203;43.144.107.206;43.144.107.214;43.144.107.219;43.144.107.223;43.144.107.227;43.144.107.231;43.144.107.239;43.144.107.245;43.144.107.250;43.144.107.251;43.144.107.252;43.144.107.33;43.144.107.35;43.144.107.43;43.144.107.48;43.144.107.5;43.144.107.54;43.144.107.55;43.144.107.56;43.144.107.57

你也可以通过访问地址方式获取最新IP池数据

  1. 飞书格式: https://oauth2.account.tencent.com/v1/.well-known/ip?format=feishu (对应飞书批量修改)
  2. 钉钉格式(,分隔): https://oauth2.account.tencent.com/v1/.well-known/ip?format=dingtalk
  3. 企微风格(;分隔): https://oauth2.account.tencent.com/v1/.well-known/ip?format=wecom