Beyond Identity Platform Authenticator Deployment Requirements

This article addresses specific requirements from the security software perspective. The supported platforms are listed in a related article: Supported Platforms and System Requirements.

Credential Requirements

Administrative privileges are NOT required on local desktops/laptops.

macOS Team Identifier

The team identifier for macOS is BZA6SZ8XVQ.

Process allowlist requirements

Firewall / Proxy URL Allowlisting

*.byndid.com

E-Mail Proxy Allowlisting

Allowlist domain byndid.com

Bypasses for Host Firewall

Beyond Identity Domains and Known Hosts

Some organizations want to control access more strictly and explicitly allowlist the known addresses or route their VPN tunnels differently based on the destination.

The recommended way is to allowlist all hosts in our ecosystem.
*.beyondidentity.com
*.byndid.com

Explicitly allowlisting specific hosts is likely to cause an interruption in the authentication service eventually as our services evolve and we introduce more features that use different hosts.

The following table describes the explicit hosts.

Beyond Identity’s IP addresses

Customers that use IP controls will need to add the following IPs to allow cloud communications from Beyond Identity cloud services to your integration servers.

U.S. Customers

Production US Primary (us-east-2): 

• 3.139.250.82
• 3.133.76.42
• 18.225.16.182

Production US Secondary:

• 13.52.210.186 
• 54.151.74.30

• 34.218.146.196
• 54.203.163.254
• 35.166.108.93

EU Customers

Production EU Primary (eu-central-1):  

• 18.196.19.155
• 3.121.221.43
• 52.28.57.25