Platform manual
Allowed domains
The widget runs only on the domains you list.
The Access section has a tab for allowed domains. It holds the list of sites where the verification widget works. The widget runs only on the domains added here. Add every domain where you embed the widget.
Domain rules
- The widget runs only on sites that open over HTTPS.
- You can add a mask. The mask
*.example.comallows every subdomain ofexample.com, but notexample.comitself. To allow the domain itself, add it as a separate entry. - A change takes effect within two minutes.
- Until at least one domain is added, the Web SDK settings in the scenario are unavailable.
- Only the account owner, or a user with the delegation right, can change the domains. See access rights.
Add a domain
- Open Access, then Allowed domains.
- Enter the domain in the domain field, for example
app.example.com. - Click Add. The message "Domain added" appears and the domain shows up in the list.
While the list is empty, the tab reads "No domains added yet".
Delete a domain
- Click Delete in the row of the domain.
- Confirm the deletion. Within two minutes the widget stops working on that domain, and verifications in progress there are interrupted.
Messages and what to do
| Message | What to do |
|---|---|
| Enter a domain | The field is empty. Enter a domain. |
Enter a domain, for example app.example.com, or a mask *.example.com | Check the spelling. Enter a domain name or a mask only, with no path. |
| The widget runs only on https sites | Enter the domain of a site that opens over HTTPS. |
| This domain has already been added | The domain is already in the list. |
| The domain is too long | Shorten the domain. |
| This domain has already been deleted. Refresh the page | The list was changed in another tab or by another user. Refresh the page. |
| You have no right to change domains | Ask the account owner. |
Next
- Installing the Web SDK, where the domain requirement is part of the steps.
- Access tokens, the other tab of the same section.