Integrations - Enabling Web Access - Custom Domains

Introduction

On this page, you can read about enabling web access and custom domains. Find out about our list of supported browsers, as well as the IPs (Internal Protocol) and Domains we use, and how to access Employee Support regarding these topics. Make use of the table of contents for easier navigation by topic within this article.

Table of Contents

Web Access

• Welcome
• Browser Support
• IPs & Domains Used
• Images & Other Assets
• Live Chat (Employee Support)
• Wellbeing Centre

Custom Domains

• Custom Domains
• FAQs

Welcome

Our services are available to the Internet and we don't expect them to be blocked by default. Depending on the firewalls and security products in use in your organization, you may need to know the IP addresses and hostnames that we use across our products so you can add them to your allow lists. 

Browser Support

Reward Gateway supports the browsers listed in the article Supported browsers for Reward Gateway platforms.

IPs & Domains Used

Each Reward Gateway client is allocated a subdomain on one of five top-level domains that allow the application to identify them uniquely. This will be provided by the Implementation Specialist.

Note: Please replace [program] with the client's specific domain slug.

Images & Other Assets

Image content and other assets are loaded from servers hosted with MaxCDN (content delivery network). No personal data is held in this environment.

Live Chat (Employee Support)

We use Zendesk Chat to provide a live chat function for you to contact our support team. Please ensure that you have performed the following:

Zendesk Chat only uses ports 80 and 443, which should be open on all firewalls as they are standard ports. The more important thing to look for is the following:

• Traffic from *.zopim.com is whitelisted on the firewall. (* is a wildcard and means all subdomains on the zopim.com domain).
• Zendesk Chat relies on Amazon for services. If the customer is blocking Amazon IPs, it could negatively impact chat performance.

For further details, see Zendesks guide on Firewall configuration.

Wellbeing Centre

For our Wellbeing Centre content, we have partnered with GymPass, who use Akamai as a CDN. You can find their domains on this Brightcove page. Please note this will only be necessary if you would usually block access to these locations.

Custom Domains

Your programme runs from a custom hostname underneath one of our domains, which we refer to as an Internal Domain, for example; clientname.rewardgateway.co.uk. At present, we do not have the ability to run fully custom domains for customers.

However, we do support a Redirection Domain, which you can pick yourselves and use to advertise and direct your employees to. For example: clientprogrammename.com. You will always see the Internal Domain in the URL bar when browsing your programme, not the Redirection Domain. 

How This Can Be Done

Reward Gateway Fully Managed

We can buy the domain for you and host a HTTP 301 Redirect via a service called DNS Made Easy. When visiting your Redirection Domain, the browser will quickly redirect you to your internal domain. 

Client Fully Managed

Clients can run their own HTTP 301 Redirect themselves on a domain of their choice. Speak with your Implementation Specialist to confirm your Internal Domain to set as the target for your 301. 

Client Owned, Reward Gateway Managed

We understand that clients may wish to keep their domains under their direct ownership, while allowing us to handle the redirect. To do this, you must delegate the domains nameservers to DNS Made Easy (a 3rd party DNS provider we use), and then we will setup the 'HTTP 301 Redirect' to your Internal Domain. 

Please set your Redirection Domain's nameservers to at least three of the following: 

• ns20.digicertdns.com
• ns21.digicertdns.com
• ns22.digicertdns.com
• ns23.digicertdns.com
• ns24.digicertdns.com
• ns25.digicertdns.com
• ns26.digicertdns.com

If you use a Reward Gateway managed Redirection Domain, the details that your IT team may need for firewall allow listing are as follows:

About 'HTTP 301 Redirect'

In layman's terms, the redirection domain sends a signal (301) to the user's browser to point it to the internal domain, i.e. a redirection. As this is a permanent redirection from one URL to another, all requests to the redirection domain URL will automatically be sent to the internal domain URL. 

Note that for the redirection domain, there is not SSL/TLS certificate attached to it, so it's access with HTTP and not HTTPS.

Frequently Asked Questions

Do you support framed redirects?

Can we use HTTPS or an SSL certificate on the Redirection Domain?

Why can I not point my DNS records at your IP?

What happens to the Custom Domain if we part ways?