The Sidepanel does not load on your network – Tekst

Symptom: The Sidepanel loads at home but not at the office, or only when you are off the company VPN. Different people get different results on the same network, or the same person gets a different result at a different time.

Cause: This pattern points at the network, not at Tekst. Your Tekst permissions are the same wherever you sign in, so access never changes because you connected through a different network or turned your VPN on. When the result depends on location, something on the corporate network is blocking or altering part of what the panel needs: a web gateway or content filter, a proxy that inspects traffic, a policy that blocks popups, or a sign-in rule tied to a network location.

Being on the VPN normally counts as being inside the corporate network, so "it only works when I am off the VPN" and "it only works when I am on the VPN" are two versions of the same problem.

Check that each address loads

Open each of these in a normal browser tab on the computer where the panel fails, then repeat on a network where it works so you can compare the two. A block page, a certificate warning, or a page that never finishes loading means a gateway or proxy is stopping it.

Address	What it is for	What you should see
`https://app.tekst.ai/plugins/outlook/taskpane`	The Sidepanel itself	A Tekst sign-in card
`https://auth.tekst.ai`	Signing in	A response from Tekst or your identity provider, not a block page
`https://api.tekst.ai`	The data the panel loads	A short error message from Tekst, not a block page
`https://api.tekst.com`	The same, on the newer address	A short error message from Tekst, not a block page
`https://ws.tekst.com`	Live updates while the panel is open	A response rather than a blocked or dropped connection
`https://appsforoffice.microsoft.com`	Microsoft's add-in files	Loads normally. If this is filtered, no Outlook add-in works, not only Tekst

Allow HTTPS on port 443 to all of them. The panel picks one of the two API addresses depending on how it was served, so allow both rather than guessing which one your setup uses. See Troubleshoot Firewall for the full list of Tekst domains.

Check the policies around them

Even when every address loads, three settings can still block the panel:

Popups and sign-in windows. Signing in opens a separate window, and a policy that blocks it makes sign-in fail without a clear message. Which window depends on how you use the Sidepanel: the Outlook app opens a popup from outlook.office.com, so popups have to be allowed for that site, while the browser extension opens a sign-in window of its own that a content filter or extension policy can block just as easily.
Websocket traffic. The panel keeps a websocket connection to ws.tekst.com open for live updates. Some proxies allow the address but drop the websocket, which leaves the panel loading and never refreshing.
Conditional access rules. If your identity provider has a policy scoped to a named location, a trusted IP range, or a device compliance state, it can accept a sign-in from one network and refuse it from another. Ask whoever manages your identity provider to check the sign-in logs for the affected user at the time of the failure.

If the address loads normally in a browser tab and the panel still fails, contact support@tekst.com and tell us which networks you tested and what happened on each. In the Outlook app, if you waited and got the Outlook isn't connecting screen, add its diagnostics report as well.