Whitelisting Requirements for TIBCO Control Plane

You must whitelist the following URLs to allow outbound traffic from data plane to TIBCO Control Plane for users accessing it from behind any firewalls.

In the following table, host prefix is unique prefix for the organization configured when provisioning subscription.

Note: This topic is applicable for TIBCO Operated Control Plane environment and not applicable to self-hosted TIBCO Control Plane.

AWS US- Oregon Region

Component URL
TIBCO Control Plane

https://<host-prefix>.us-west.my.tibco.com
tunnel https://<host-prefix>.us-west.tunnel.tibco.com
Authentication using TIBCO Account

https://sso-ext.tibco.com

https://accounts.tibco.com

AWS Europe - Ireland Region

Component URL
TIBCO Control Plane

https://<host-prefix>.eu-west.my.tibco.com
tunnel https://<host-prefix>.eu-west.tunnel.tibco.com
Authentication using TIBCO Account

https://sso-ext.tibco.com

https://accounts.tibco.com

TIBCO Control Plane Egress IP Addresses

TIBCO Control Plane initiates connections to customer LDAP servers when you configure LDAP as an alternative to external IdP. You must whitelist TIBCO's egress IP addresses for these connections as specified in the following table.

Region IP Address
us-west-2 (Oregon)

100.21.48.36
eu-west-1 (Ireland) 54.75.122.221