This article is for:
- IT Groups and Administrators
Allow hosts
If you experience issues accessing Workiva or receiving emails, you may want to check to make sure you have certain domains on your allowlist at your organization. If you’re an IT admin, you can use the information below to allow domains and emails for your network.
Workiva is accessed through a secure HTTPS connection using TLS version 1.3. The URLs are:
-
U.S.A., Central America, and South America:
https://app.wdesk.com -
APAC:
https://apac.wdesk.com -
Canada:
https://ca.wdesk.com -
EMEA:
https://eu.wdesk.com
Workiva uses Amazon Web Services (AWS) for IaaS (Infrastructure as a Service).
Note: Workiva uses HTTPS (TLS over port 443) for all communications to the platform.
Network policy options
Workiva works with Domain Name System (DNS) allowlisting using the URLs listed below. There are primarily two domains, app.wdesk.com and webfilings.com. If you allowlist *.*.wdesk.com and *.webfilings.com this will allow the application to access through your firewalls.
As an alternative SHA-2 certificates on our servers are current for the .wdesk.com and .webfilings.com domains.
Host and email details
The following table includes both US, APAC, Canada, and EMEA allowlistings.
If your organization uses US (app.wdesk.com), the other values may be ignored. If your organization uses one of the others, the US and other values may be ignored.
Domains required for proper Platform functionality
| Domain | Purpose |
|---|---|
| h.app.wdesk.com h.apac.wdesk.com h.ca.wdesk.com h.eu.wdesk.com |
Main subdomains for common Workiva services |
| *.wdesk.com | Main domain for production application |
| *.*.wdesk.com | Subdomains for supporting components |
| h.app.wdesk.com/s/messaging-frontend/ h.apac.wdesk.com/s/messaging-frontend/ h.ca.wdesk.com/s/messaging-frontend/ h.eu.wdesk.com/s/messaging-frontend/ |
WebSocket/XHR for Spreadsheets/Database |
| cdn-prod.wdesk.com | Workiva content delivery network |
| taxonomy-dot-webfilings-hrd.appspot.com taxonomy-dot-webfilings.appspot.com taxonomy-dot-webfilings-eu.appspot.com |
Taxonomy service (XBRL) |
| *.workiva.com | Corporate domain |
| *.webfilings.com | Old corporate domain |
| ajax.googleapis.com | Google CDN for hosted libraries |
| fpdownload.adobe.com | Font downloads |
| *.googleanalytics.com | Google Analytics - Anonymous metric tracking for application improvements |
| *.wistia.com, fast.wistia.net | Video hosting for help content |
| gov-bam.nr-data.net js-agent.newrelic.com |
New Relic application performance monitoring |
| *.wdeskusercontent.com | Used for hosting user-uploaded content and files to provide improved customer security |
| v2assets.zopim.io static.zdassets.com |
Chat support agent profile pictures |
| *.zopim.com | Chat client websocket connection |
| id.zopim.com | Login and Authentication for chat client |
| v2assets.zopim.io static.zdassets.com |
Chat Support Agent profile pictures |
| workiva.zendesk.com | Help article sourcing |
| training.workiva.com api.rollbar.com cloud.scorm.com app.box.com *.skilljar.com *.sj-cdn.net *.everpath-course-content.s3-accelerate.amazonaws.com |
Learning Management System (LMS) |
| auth.workiva.com | Authentication portal for signing in to Support Center and Learning Hub |
| id.zopim.com | Login and authentication for chat client |
| accounting.workiva.com | Workiva Accounting team to send/receive payment documentation |
| events.workiva.com | Workiva Amplify Event domain |
| operations.workiva.com | Workiva operational domain that may include customer project documentation |
| survey.workiva.com | Customer satisfaction surveys |
| www.pendo.com api.feedback.us.pendo.io api.feedback.eu.pendo.io |
An in-app guide to help customers navigate through their user experience |
| https://appsforoffice.microsoft.com/* https://go.microsoft.com/fwlink/?LinkId=276812 http://schemas.microsoft.com/office/taskpaneappversionoverrides http://schemas.microsoft.com/office/officeappbasictypes/1.0 http://schemas.microsoft.com/office/appforoffice/1.1 |
Workiva Sync for non-GCCH customers |
| https://appsforoffice.gcch.cdn.office.net | Workiva Sync for GCCH customers |
| https://appsforoffice.dod.cdn.office.net | Workiva Sync for DOD customers |
| *.jwpcdn.com *.jwplayer.com *.jwplatform.com *.jwpsrv.com *.jwpltx.com jwpsrv-vh.akamaihd.net |
CDN domains utilized by JWPlayer for displaying media within Skilljar content (as outlined in Configuring Firewall Whitelisting and Content Security Policy on the Skilljar site). |
| *.dromo.io | Dromo is used Governance, Risk, and Compliance solutions to import risk and control data |
Please ensure all domains are allowed to egress without MITM proxy.
Email and IP list
| IP | Purpose |
|---|---|
| notifications@workiva.com 54.240.45.95 54.240.45.96 54.240.45.97 54.240.45.98 54.240.45.99 |
U.S.A., Central America, and South America Workiva notification email and dedicated IP addresses |
| notifications@workiva.com 76.223.182.50 76.223.182.51 76.223.182.52 76.223.182.53 76.223.182.54 |
APAC Wdesk notification email and dedicated IP addresses |
| notifications@workiva.com 54.240.81.118 54.240.81.119 54.240.81.120 54.240.81.121 54.240.81.122 |
Canada Workiva notification email and dedicated IP addresses |
| notifications@workiva.com 69.169.230.102 69.169.230.103 69.169.230.104 69.169.230.105 69.169.230.106 |
EMEA Workiva notification email and dedicated IP addresses |
| training@workiva.com no-reply-training@workiva.com |
Workiva training support, password reset, and notification emails |
IP address for Wdata Chains
If you're using Wdata chains with a CloudRunner and your network requires an allowlist of inbound IPs, add one of the following:
| IP | Purpose |
|---|---|
| 34.199.100.193 | US production application |
| 52.69.47.164 | APAC production application |
|
99.79.170.123 35.182.218.212 15.222.167.157 |
Canada production application |
| 54.76.117.194 | EMEA production application |
IP address for Workiva Scripting
| IP | Purpose |
|---|---|
| 3.222.223.56 | US production application |
| 52.197.33.96 | APAC production application |
| 16.52.199.134 | Canada production application |
| 54.74.82.80 | EMEA production application |
Learning Hub IP
| IP | Purpose |
|---|---|
| 54.153.47.43 | Learning Hub courses and training |
IP address for Workiva Support users
To ensure that Workiva's support personnel are available to you at all times, include the following Workiva IP addresses in your IP addresses configuration. Adding these IPs also ensures that our Workiva support services will continue to be available to you in the event of natural disasters or utility outages.
| Workiva Purpose | Range Start | Range End |
|---|---|---|
| Allowlist VPN - US | 52.23.136.245 | 52.23.136.245 |
| Allowlist VPN - APAC | 52.68.124.100 | 52.68.124.100 |
| Allowlist VPN - Canada (same as US) | 52.23.136.245 | 52.23.136.245 |
| Allowlist VPN - EMEA | 34.243.220.178 | 34.243.220.178 |
If you need assistance with domain and email allowlisting, you can reach out to Workiva Support.
Common questions
Can I choose to allow specific IPs?
Choosing to allow on specific IPs for Workiva will not work. The IP addresses used are too dynamic to provide optimum scalability. Workiva can enforce your IP allowlisting for your internal network as a security setting. Workiva does provide a unique environment through our pointers and indexing to ensure your data is only accessible by you.
Workiva uses a public deployment model. A "public deployment model" as defined by NIST is "the cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider."