Whitelist custom URLs
Any custom UI that directly connects to IBM Food Trust APIs AND uses IBM Blockchain Solution Manager to authenticate users must whitelist any
'returnTo' URL that is NOT food.ibm.com or sandbox.food.ibm.com.
A custom UI uses IBM Blockchain Solution Manager to authenticate users ONLY if it uses the path <IBM Food Trust base url>/onboarding/v1/logins?returnTo=<custom UI URL>. In this configuration, if the custom UI URL is not whitelisted, the authenticated token will not be delivered and authentication and redirection to the custom UI URL will fail.
Both the IBM Food Trust production (food.ibm.com) and sandbox (sandbox.food.ibm.com) environments are being restricted for improved security.
Open a support ticket at IBM Food Trust Support to have your applicable custom UI URLs added to the food.ibm.com and sandbox.food.ibm.com whitelists.