A guide on allowlisting your Learnosity-powered platform for schools, universities or corporate networks.
Why do I need to allowlist?
Within any school, university or corporate network, there's usually a requirement to allowlist certain domains for your product to ensure it works for all your users. We've provided a list below of all the domains that need to be sent on to schools, districts, institutions etc. to ensure that your Learnosity-powered product functions smoothly.
Allowlisting for Learnosity is done by domain, not IP address. One of the reasons for this is that Learnosity is hosted in AWS, as a scalable, cloud based solution. This means that we don't have fixed IPs within this platform, as well as making effective use of CDNs which mean that assets will be served from hosts and IPs closest to your geographical location.
In some cases, Learnosity has partnered with firewall or content filter companies to make allowlisting even easier.
Palo Alto Networks
Learnosity has partnered with Palo Alto Networks to provide a Learnosity specific signature to make allowlisting simple for end-users. Since Applications and Threat Content Release Version 769, You'll find a Learnosity application ready to be used in any of your content filers, in place of the shortlist below.
URL Allowlist - Short
Our short list includes all our APIs using wildcards - for the vast majority of modern firewalls and content filters, this should be sufficient.
- learnositymediaprocessed.s3.amazonaws.com (For student upload of files for File Upload and Image Annotation Upload Question types)
- s3.amazonaws.com/assets.learnosity.com (for Author upload of images, audio and video through the Author API)
- s3.amazonaws.com/learnositymediaprocessed (For student or teacher resume or review mode of Audio Question types)
- www.googletagmanager.com (Used for Learnosity error tracking. No reduction of student facing functionality if this is not allowlisted.)
- www.google-analytics.com (Used for Learnosity error tracking. No reduction of student facing functionality if this is not allowlisted.)
URL Allowlist - Long
In cases where you may require the full list of subdomains, these are provided below. We've also provided the region based URLs (e.g. items-va.learnosity.com and items-au.learnosity.com) - based on how you're using Learnosity, you likely will not need all of these below.
Core API domains
Lower Level API domains
Question Editor API
Media asset domains
CORS origin settings
Cross Origin Resource Sharing (CORS) settings can be configured to allow web page resources to be requested from a remote domain. In the context of Learnosity, this can be relevant for custom Questions.
For example, when creating a custom Question, you may need to open up the CORS privileges for any files in your custom Question which are hosted outside Learnosity, since this will be hosted on a different domain. For example, files such as authoring_custom_layout.html may require this. In this case, you would use
questioneditor.learnosity.com as the configuration value for the CORS origin setting.
Read more about CORS on Wikipedia.