Whitelisting Requirements

In some cases, it may be necessary to whitelist certain domains, IP addresses, or processes in your firewall or other security software to ensure the optimal performance of our SaaS application. Whitelisting tells your security systems to allow incoming traffic from our application and is essential for preventing interruptions in service.

DNS Filtering

Your team's access to the page prod.api.us-east-1.prod.mosaicapp.com may be being blocked by a DNS filter.

IP Address Whitelisting

Our application uses the following IP addresses for delivering its services. Please whitelist these in your firewall or security software:

52.202.82.74

Domain Whitelisting

We also recommend whitelisting the following domains. Some features of our application may not work correctly without access to these:

# Mosaic
mosaicapp.com
projects.mosaicapp.com
login.mosaicapp.com
auth.us-east-1.prod.mosaicapp.com
galaxy.us-east-1.prod.mosaicapp.com
integration-server.us-east-1.prod.mosaicapp.com
prod.api.us-east-1.prod.mosaicapp.com

# Third-Party Library
code.jquery.com
cdn.jsdelivr.net

# Feature Flags
auth.split.io
events.split.io
sdk.split.io
streaming.split.io

# Fonts
fonts.googleapis.com
fonts.gstatic.com

# Chat / Help
*.algolia.net
api.appcues.net
app.arcade.software
embedwistia-a.akamaihd.net
*.gleap.io
wss://ws.gleap.io
*.litix.io
player.vimeo.com
res.cloudinary.com
twemoji.maxcdn.com
*.wistia.com
*.wistia.net

# CSV Import
app.osmos.io
mosaic-bak-uploader.s3.amazonaws.com
mosaic-prod-gov-csv.s3-us-gov-west-1.amazonaws.com
party-csv.s3.amazonaws.com

# Monitoring
analytics.google.com
*.ap3prod.com
api-js.mixpanel.com
*.autopilotapp.com
browser.sentry-cdn.com
c.bing.com
cdn.lr-in.com
cdn3l.ink
cdn4.mxpnl.com
cdnau.net
*.clarity.ms
*.google-analytics.com
o239722.ingest.sentry.io
*.ortto.app
browser-intake-datadoghq.com

Upcoming Changes (Effective March 3, 2025)

As part of our ongoing efforts to enhance performance, security, and reliability, we are upgrading parts of our infrastructure. Users who utilize Mosaic’s Open API or have strict networking restrictions should update their whitelisted domains accordingly.

The following domain changes will take effect:

# Updated Domains
Old: auth.us-east-1.prod.mosaicapp.com
New: auth.prod.prod.us-east-1.mosaicapp.com

Old: galaxy.us-east-1.prod.mosaicapp.com
New: galaxy.prod.us-east-1.mosaicapp.com

Old: integration-server.us-east-1.prod.mosaicapp.com
New: integration-server.prod.prod.us-east-1.mosaicapp.com

Old: prod.api.us-east-1.prod.mosaicapp.com
New: api.prod.prod.us-east-1.mosaicapp.com

For users utilizing Mosaic’s Open API, please ensure that hostname updates are completed by EoD March 3, 2025 to avoid disruptions.

Tenant-Specific Domains

For customers using Mosaic Tenant services, the structure of the domains differs from the default production domains. Ensure the appropriate tenant domains are whitelisted for proper functionality.

Default Production Domains

prod.api.us-east-1.prod.mosaicapp.com
integration-server.us-east-1.prod.mosaicapp.com

Tenant-Specific Domains

api.[Tenant Name].prod.us-east-1.mosaicapp.com
integration-server.[Tenant Name].prod.us-east-1.mosaicapp.com

Email Server Whitelisting

If our application sends email notifications or has email-based features, ensure these email servers are whitelisted to avoid messages being treated as spam:

no-reply@login.mosaicapp.com
donotreply@prod.mosaicapp.com

Whitelisting Process

The exact steps to whitelist our IP addresses, domains, and email servers will depend on your specific network setup and the security software you use. We recommend contacting your IT department or service provider if you are not familiar with this process.

The IP addresses and domains needed for our service can change due to updates and improvements in our system. Please check this section regularly for the most up-to-date information.

Troubleshooting

If you experience any issues after whitelisting the required addresses, domains, and ports, please contact our support team at support@mosaicapp.com