# Managing allowed domains for an account

The **Allowed Domains** page of **Account Settings** contains the list of domains for the account, including:

* Domains for workflows to connect to.
* Domains for single sign-on (SSO).
* Amazon S3 domains that the Data Agent can write data to. Amazon S3 domains can also be used for workflows.

For each domain, the list includes:

* Whether the domain is verified. Until the domain is verified, you cannot use it.
* Where the domain can be used.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FWySa9IdxBMkrcszdUzgM%2FAccount_DomainAllowedUse.png?alt=media&#x26;token=2a4211fb-ad51-4174-9a01-ce50f14938c7" alt=""><figcaption><p>Verified domain with indicators of how the domain can be used</p></figcaption></figure>

Note that you configure for each workspace the secrets that are used to connect to the domains. For more information, go to [workspace-secrets](https://docs.tonic.ai/fabricate/workspaces/workspace-secrets "mention").

## Adding a domain

All domains must be verified before you can use them.

Amazon S3 domains are verified automatically.

For other types of domains, when you add the domain to the list, you must either:

* For a domain that you own, add a TXT record to your DNS settings to verify ownership.
* Request access to the domain.

To add a domain:

1. In the domain field, type the domain, then click **Add Domain**.\
   \
   Amazon S3 domains must be in the format `{bucket}.s3.{Region}.amazonaws.com`. For example, `my-bucket.s3.us-east-1.amazonaws.com`.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FzaYrZkiaxE4hvLawlKuj%2FAccount_AddDomain.png?alt=media&#x26;token=cbf489a2-26be-4a73-b357-16a658e42932" alt=""><figcaption><p>Domain with Add Domain option enabled</p></figcaption></figure>

2. For domains other than Amazon S3 domains, on the **Add Domain** panel:
   * If you own the domain, click **I own this domain**.
   * If you do not own the domain, click **Request access**.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FOf7moDpkixX17wXpGWbJ%2FAccount_AddDomainPanel.png?alt=media&#x26;token=c965732a-f03f-4684-a1b3-ab36fbb438a1" alt=""><figcaption><p>Add Domain panel to indicate whether you own the domain</p></figcaption></figure>

### Domain that you own

If you select **I own this domain**, then Fabricate:

1. Adds an entry to the domain list.
2. Displays the value to add to the DNS settings.
3. Marks the domain as pending verification.

In your DNS settings, add the TXT entry. It can take up to 10 minutes for the DNS changes to propagate.

Fabricate automatically attempts to verify the domain every 5 minutes. To run the verification manually, click the refresh icon.

After it completes the verification, Fabricate marks the domain as verified and available to use.

Domains that you own are available for both workflows and SSO.

### Domain that you request access to

If you click **Request access**, then on the **Request Access** panel:

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2Fi7EbowarCrzaKWxZ9jkS%2FAccount_DomainRequestAccess.png?alt=media&#x26;token=44ff4ed2-ac09-45ae-b1e2-1510fa611256" alt=""><figcaption></figcaption></figure>

1. In the **Note** field, you can optionally provide a note to explain why you require access to the domain.
2. Under **Requested permissions**:

   * If the domain is for requests from workflows, check the **Outbound requests** checkbox.
   * If the domain is for your SSO, check the **SSO authentication** checkbox.

   You can request access to use a domain for both workflows and SSO.
3. Click **Submit Request**.

Fabricate adds an entry to the domain lists, and marks the domain as pending request approval.

After the approval is received, Fabricate marks the domain as available to use.

## Removing a domain

Before you remove a domain, make sure that it is not in use.

To remove a domain, on the domain entry, click the delete icon.