Skip to content

IP Whitelisting Requirements

This document provides information on IP whitelisting requirements for proper system access.

Single Sign-On (SSO)

CatalogIQ supports Single Sign-On (SSO) integration with various identity providers. For SSO setup, please contact your CatalogIQ account representative for configuration assistance.

IP Whitelisting Requirements

For authentication to work properly with CatalogIQ, you must whitelist specific IP addresses based on your tenant's region. This is essential for allowing CatalogIQ services to communicate with your authentication systems.

Auth0 IP Addresses

For authentication to work properly, add the following Auth0 IP addresses to your firewall allowlist based on your tenant's region:

United States

174.129.105.183
18.116.79.126
18.117.64.128
18.191.46.63
18.218.158.118
18.218.26.94
18.232.225.224
18.233.90.226
3.131.238.180
3.131.55.63
3.132.201.78
3.133.18.220
3.134.176.17
3.19.44.88
3.20.16.23
3.20.244.231
3.21.254.195
3.211.189.167
34.211.191.214
34.233.19.82
34.233.190.223
35.160.3.103
35.162.47.8
35.166.202.113
35.167.74.121
35.171.156.124
35.82.131.220
44.205.93.104
44.218.235.21
44.219.52.110
44.224.190.45
44.246.144.93
52.12.243.90
52.14.149.14
52.2.61.131
52.204.128.250
52.206.34.127
52.33.36.223
52.43.255.209
52.88.192.232
52.89.116.72
54.145.227.59
54.157.101.160
54.200.12.78
54.209.32.202
54.245.16.146
54.245.93.221
54.68.157.8
54.69.107.228

Europe

18.197.9.11
18.198.229.148
3.125.185.137
3.65.249.224
3.67.233.131
3.68.125.137
3.72.27.152
3.74.90.247
34.246.118.27
35.157.198.116
35.157.221.52
52.17.111.199
52.19.3.147
52.208.95.174
52.210.121.45
52.210.122.50
52.28.184.187
52.30.153.34
52.57.230.214
54.228.204.106
54.228.86.224
54.73.137.216
54.75.208.179
54.76.184.103

Australia

13.210.52.131
13.238.180.132
13.55.232.24
16.50.37.252
16.51.137.244
16.51.49.47
54.153.131.0
54.252.2.143
54.79.31.78

Pitcher Service IP Addresses

If your organization uses IP restrictions for Salesforce or other external services that Pitcher connects to, you must whitelist the following Pitcher service IP addresses. These IPs are used by Pitcher backend services (e.g., for Salesforce token refresh).

Production Environments

Europe (Ireland)

52.212.191.122
54.76.34.14
3.251.43.217

United States (N. Virginia)

3.209.204.197
44.218.163.215
44.221.169.239

Australia (Sydney)

13.236.217.27
3.24.24.212
13.237.219.213

Test Environments

Europe (Ireland)

108.128.2.153
52.213.179.52
54.74.243.172

United States (N. Virginia)

52.2.136.142
54.158.97.21
44.215.32.31

What Services Require IP Whitelisting

Auth0 (Authentication)

The Auth0 IP addresses need to be whitelisted for:

  1. Authentication Services: To enable login and token validation
  2. API Gateways: For secure API communication
  3. SSO Endpoints: For secure identity provider communication

Pitcher Services

The Pitcher Service IP addresses need to be whitelisted for:

  1. Salesforce Integration: For Salesforce token refresh and API calls
  2. External Service Communication: For Pitcher backend services connecting to customer systems with IP restrictions

Troubleshooting

If you encounter authentication issues:

  1. Verify IP Whitelisting: Ensure all required IP addresses are whitelisted for your region
  2. Contact Support: If issues persist, contact CatalogIQ support