Overview

itopia Labs blocks most Internet web sites by default; Labs sessions are permitted to access a limited list of sites and addresses (listed below) to allow basic functionality such as Google and Microsoft sign-in, and application-specific requirements for data access.

Administrators can add custom URLs to the allow list to permit Labs users to access additional sites and resources. In the Labs Admin Console, Custom URL Allow Lists can be configured at both the District level and at the School level. Each Labs session will aggregate its allow list from both the District and the School, and the cumulative allow list will be added to the Default Allow List detailed below.

Creating a Custom Allow List

You can add specific URLs or domains to your District or School allow list using the Labs Admin Console (labs-admin.itopia.com). The Custom Allow List supports the following formats:

• Domains and subdomains (e.g. itopia.com and labs.itopia.com)
• Partial or full URL paths (e.g., itopia.com/itopia-labs)
• Wildcards (although this is equivalent to omitting that portion of the URL; e.g., *.itopia.com and itopia.com/*)
• Protocol enforcement (e.g., https://itopia.com)

To edit your Custom Allow List:

1. Log in to the Labs Admin Console (labs-admin.itopia.com) as an administrator with Editor or higher privileges on either the School or the District you wish to configure.
2. Use the dropdown menu in the top-left corner of the console to navigate to the District or the School that you wish to configure.
3. For a District, navigate to the District Policies card; for a School, navigate to the Configuration card.
4. Click Edit.
5. Enter the URLs you wish to allow, separated by a comma, semicolon, or by pressing [ENTER].
6. Click Save.

Any new Class sessions that are started will automatically receive the new Allow Lists; sessions that are currently running will need to be restarted.

Default Allow List

Every Labs session has access to the following URLs via the Google Chrome web browser. Note that although other browsers (including the built-in Microsoft Edge browser) are not accessible, itopia Labs does not currently employ a full network traffic filter; therefore, it may be possible to access certain Internet resources using other methods.

# Google resources (required for authentication, productivity apps [Google Docs, Sheets, Drive etc.])
account.youtube.com # This does not permit access to YouTube content; however, Google still relies on this domain for user authentication
accounts.google.co.in
accounts.google.com
apis.google.com
contacts.google.com
docs.google.com
drive.google.com
firebase.com
firebaseio.com
google.co.in
google.com/a/ # Google web search is not accessible; this URL is used for authentication
google.com/accounts
googleapis.com
googleusercontent.com
gstatic.com
jamboard.google.com
mail.google.com
meet.google.com
myaccount.google.com
play.google.com
run.app
script.google.com
sheets.google.com
slides.google.com

# Third-party identity providers and required resources
classlink.com
classlink.io
duo.com
duosecurity.com
instructure.com
okta.com

# Additional URLs (required for other sites to function)
fonts.googleapis.com
jquery.com
recaptcha.net
arkoselabs.com

# Microsoft / Windows resources
microsoftonline.com
login.live.com
hwcdn.net

# itopia Labs resources
itopia.app
itopia.com
labssso.itopia.com

# Adobe applications
adobe.com
adobe.io
adobe.ly
adobecc.com
adobecce.com
adobeccstatic.com
adobeexchange.com
adobeku.com
adobelogin.com
adobeoobe.com
adobesc.com
adobess.com
adobetag.com
adobetag.com
behance.net
creativecloud.com
ftcdn.net
omtrdc.com
photoshop.com
typekit.com
typekit.net

# Autodesk applications
autode.sk
autodesk.com
autodesk360.com

# Chief Architect application
chiefarchitect.com

# SolidWorks application
solidworks.com

# SMART Notebook application
airsquirrels.com
com-smarttech-content-prod.s3.us-west-2.amazonaws.com
fabric.io
force.com
hellosmart.com
hockeyapp.net
mixpanel.com
raygun.io
smarttech-prod.com
smarttech.com
userpilot.io

# Local resources (needed for certain application services)
chrome://*
localhost
127.0.0.1