Skip to content
This repository has been archived by the owner on Oct 21, 2021. It is now read-only.

Whitelist Custom UI URLs

Josh Horton edited this page Sep 5, 2019 · 3 revisions

Whitelist Custom UI URLs

Any custom UI that directly connects to IBM Food Trust APIs AND uses IBM Blockchain Solution Manager to authenticate users must whitelist any 'returnTo' URL that is NOT food.ibm.com or sandbox.food.ibm.com.

Applicable Cases

A custom UI uses IBM Blockchain Solution Manager to authenticate users ONLY if it uses the path <IBM Food Trust base url>/onboarding/v1/logins?returnTo=<custom UI URL>. In this configuration, if the custom UI URL is not whitelisted, the authenticated token will not be delivered and authentication and redirection to the custom UI URL will fail.

Impacted Environments

Both the IBM Food Trust production (food.ibm.com) and sandbox (sandbox.food.ibm.com) environments are being restricted for improved security.

Required Action

Open a support ticket at IBM Food Trust Support to have your applicable custom UI URLs added to the food.ibm.com and sandbox.food.ibm.com whitelists.

Clone this wiki locally