Whitelist
Whitelist rules restrict inbound OpenLink requests to trusted sources. Open OpenLink from the Integration menu, select an OpenLink entry, and configure the Whitelist tab in the details panel.
Whitelist rules belong to one OpenLink entry, and they are checked together with inbound authentication. Inbound requests are matched against the caller address and host before the credential profile is verified.
- Open OpenLink
- Select the target OpenLink entry
- Open the Whitelist tab
- Click New Rule
- Enter the rule name
- Choose the rule type
- Enter the match value
- Click Create
Whitelist rules apply to inbound traffic for the selected OpenLink entry. Keep rules narrow enough to match only the expected external system or gateway.
Rule Types
| Rule Type | Match Value Example | Description |
|---|---|---|
| IP | 192.168.10.10 | Allows one source IP address |
| CIDR | 192.168.10.0/24 | Allows a network range |
| Domain | api.partner.example | Allows a domain. Enter the domain without protocol |
| URL Prefix | https://partner.example/webhook/ | Allows requests matching a URL prefix |
When at least one rule allows a source, an inbound request that matches no rule is rejected.
Manage Rules
| Operation | Description |
|---|---|
| Edit Rule | Update the rule name, type, or match value |
| Enable Rule | Makes the rule effective for inbound matching |
| Disable Rule | Keeps the rule but stops applying it |
| Delete Rule | Permanently removes the rule |
Use disable when a rule may be needed again later. Use delete only when the source is no longer trusted or no longer used.
Recommended Security Workflow
For a new OpenLink entry, use this sequence:
- Configure outbound authentication if Soln needs to call the external API
- Verify the outbound connection so the stored credentials are confirmed to work
- Configure inbound authentication if the external system calls Soln
- Add whitelist rules for known inbound sources
- Test the integration with the selected OpenLink entry
- Rotate tokens or secrets when external credentials change, then verify the connection again
- Disable or delete whitelist rules that are no longer used