System requirements
This section describes the system requirements to use IDaaS.
Supported TLS versions and cipher suites
These TLS requirements apply to all clients that communicate with IDaaS endpoints, including desktop and mobile browsers, Enterprise Service Gateway components, and other integrated clients.
IDaaS supports TLSv1.2 and TLSv1.3 with the following cipher suites.
TLSv1.3:
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_CHACHA20_POLY1305_SHA256
TLSv1.2:
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-RSA-CHACHA20-POLY1305
Microsoft Active Directory requirements
IDaaS supports the following directories for synchronizing users into IDaaS and for authenticating user passwords stored in the directory.
- Microsoft Active Directory
- Microsoft Active Directory LDS
- Microsoft Entra ID. Formerly Microsoft Azure Active Directory.
- Radiant Logic RadiantOne FID (Federated Identity Directory). Formerly RadiantOne Virtual Directory Server.
vSphere virtual environment requirements
Before installing the IDaaS Gateway using an IDaaS OVA, you must download the VMware vSphere 7.0+ virtualization environment. Confirm that your system meets the requirements for using the vSphere 5+.
The following are the system requirements for the IDaaS OVA:
- Platform: VMware vSphere 7.0 or newer
- Virtual CPUs: minimum of 2
- Virtual Memory: 4 GB
- Virtual Disk Space: 40 GB (which can be thin provisioned)
Hyper-V Manager virtual environment requirements
To create an IDaaS Gateway using an IDaaS VHD, you must have access to a Microsoft Hyper-V server, (Windows Server 2012R2), 6.3.96 or newer. Confirm that your system meets the requirements for using the Hyper-V server 6.3.96+.
The following are the system requirements for the IDaaS VHD:
- Platform: Microsoft Hyper-V for Windows Server 2016 or newer
- Virtual CPUs: minimum of 2
- Virtual Memory: 4 GB
- Virtual Disk Space: 40 GB
Desktop browser requirements
IDaaS is supported on the latest versions of the following desktop browsers.
- Apple Safari
- Google Chrome
- Microsoft Edge
- Mozilla Firefox
Mobile browser requirements
IDaaS is supported on the latest versions of the following mobile browsers.
- Android Browser
- Apple Safari
- Google Chrome
Production egress IP addresses
These IP addresses apply to server-initiated outbound requests from IDaaS to customer-managed services. They are relevant only when your service receives requests from IDaaS and enforces source IP allowlists.
Examples include:
- Webhook callback endpoints that receive events from IDaaS.
- Outbound synchronization and connector traffic from IDaaS to external services (for example, Microsoft Entra ID synchronization).
- External risk engine integrations where IDaaS sends outbound requests.
- Pass-through authenticator integrations where IDaaS calls external authentication services.
- Identity Provider integrations when IDaaS initiates server-to-server requests.
Browser-mediated OIDC and SAML sign-in flows are generally not sourced from these IDaaS egress IP addresses.
| Egress IP | IDaaS instance |
|---|---|
| 52.4.227.47 | us.trustedauth.com |
| 35.158.89.50 | de.trustedauth.com |
| 34.253.166.193 | ie.trustedauth.com |
| 18.230.177.28 | sa.trustedauth.com |
Additional egress IP addresses might be added in future releases, and existing addresses might change. Entrust will provide advance notification before these changes take effect.
Entrust Identity Verification SDK versions
When creating Entrust Identity Verification workflows for IDaaS face biometric registration and authentication, the availability of certain tasks depends on the version of the Entrust Identity Verification SDK used by the client.
The following Entrust Identity Verification SDK versions are used by IDaaS and the Entrust Identity Mobile application:
| Client | Client Version | Platform | Entrust Identity Verification SDK Version |
|---|---|---|---|
| IDaaS | 5.47 | Web | 14.77.0 |
| Identity Mobile | 24.4.x | iOS | 30.6.0 |
| Identity Mobile | 25.1.x | iOS | 30.6.0 |
| Identity Mobile | 25.2.x | iOS | 32.1.1 |
| Identity Mobile | 25.3.x | iOS | 32.4.2 |
| Identity Mobile | 25.4.x | iOS | 32.3.3 |
| Identity Mobile | 25.5.x | iOS | 32.6.0 |
| Identity Mobile | 26.1.x | iOS | 32.6.3 |
| Identity Mobile | 26.2.x | iOS | 32.8.0 |
| Identity Mobile | 26.3.x | iOS | 33.0.1 |
| Identity Mobile | 24.4.x | Android | 21.2.0 |
| Identity Mobile | 25.1.x | Android | 21.2.0 |
| Identity Mobile | 25.2.x | Android | 22.2.1 |
| Identity Mobile | 25.3.x | Android | 22.6.0 |
| Identity Mobile | 25.4.x | Android | 22.9.2 |
| Identity Mobile | 25.5.x | Android | 23.2.0 |
| Identity Mobile | 26.1.x | Android | 23.3.0 |
| Identity Mobile | 26.2.x | Android | 23.5.0 |
| Identity Mobile | 26.3.x | Android | 23.7.0 |