Skip to navigation
Build an extension appSet up your IT infrastructure

Network configuration

View as Markdown

This section describes network setup required to ensure that Docusign can communicate successfully with your platform.

Firewall configuration

If your API service, API proxy, or identity provider is protected by a firewall, you must configure it to allow requests from Docusign API addresses that are used to:

  • Authorize a Docusign account to connect to your API service when a Docusign user installs and configures your extension app.
  • Send requests to your API service when extension app actions and capabilities are executed.

See Docusign endpoint IP addresses for a list of addresses from which the firewall should allow requests. The IP addresses are listed by account region.

Allow IP addresses for all the regions in which you intend to make your extension app available on the production App Center. For example, if you plan to make your extension app available to users in the US and Canada, include the IP addresses for North America-based and Canada-based accounts.

By default, published extension apps are available only to US customers on the production App Center. You can specify availability in additional regions. See Globalization for details.

See this table for additional guidance on which regions’ IP addresses you should allow:

Account regionAllow IP addresses for this regionNotes
North America-based and demo accountsAlwaysAll extension apps require these IP addresses for development and testing in the Docusign developer (demo) environment.
These IP addresses are also used for production App Center users whose Docusign accounts are based in the US data centers NA1, NA2, NA3, or NA4.
Canada-based accountsIf your extension app will be available to production App Center users whose Docusign account is based in the Canada (CA) data center.
European Union-based accountsIf your extension app will be available to production App Center users whose Docusign account is based in the European Union (EU) data center.
Australia-based accountsIf your extension app will be available to production App Center users whose Docusign account is based in the Australia (AU) data center.
Japan-based accountsIf your extension app will be available to production App Center users whose Docusign account is based in the Japan (JP1) data center.

The Docusign endpoint IP addresses should be added to the allowed lists on all firewalls in all environments that may receive requests from Docusign extension apps. For example, if your platform has separate development, test, and production environments, add the IP addresses to all of their firewalls.

If your firewall is not configured to allow requests from Docusign endpoint IP addresses, you may see any of the following errors when trying to test your extension app:

Ad blocker configuration

If your network runs an ad blocker, you’ll need to add these addresses to its allowed list to install and uninstall extension apps in the Docusign App Center:

  • https://app.optimizely.com
  • https://app.optimizely.com/*
  • https://*.app.optimizely.com
  • https://*.app.optimizely.com/*
  • https://api.optimizely.com
  • https://api.optimizely.com/*
  • https://cdn-prod.optimizely-static.com
  • https://cdn-prod.optimizely-static.com/*
  • https://p13n-results-api.optimizely.com/*
  • *.siteintercept.qualtrics.com
  • *.zn4o6wz32wpljkntm-docusign.siteintercept.qualtrics.com

If an ad blocker prohibits access to these addresses, App Center users may see this error when they try to install or uninstall an extension app:

We encountered an unexpected error. Reload the page and try again.

Omitting the two qualtrics.com domains from the allowed list won’t cause issues, but Docusign recommends adding them to the allowed list. This ensures that users will be able to submit feedback to Docusign via a form that appears on some of our pages.

Next steps