Managing allowed domains for an account

The Allowed Domains page of Account Settings contains the list of domains for the account, including:

• Domains for workflows to connect to.
• Domains for single sign-on (SSO).
• Amazon S3 domains that the Data Agent can write data to. Amazon S3 domains can also be used for workflows.
• An Azure Blob Storage account that the Data Agent can write data to. Azure Blob Storage domains can also be used for workflows.
• Kafka brokers to export data to.

For each domain, the list includes:

• Whether the domain is verified. Until the domain is verified, you cannot use it.
• Where the domain can be used.

Verified domain with indicators of how the domain can be used

Note that you configure for each workspace the secrets that are used to connect to the domains. For more information, go to Configuring available secrets for a workspace.

Adding a domain

All domains must be verified before you can use them.

Amazon S3 and Azure Blob Storage domains are verified automatically.

For other types of domains, when you add the domain to the list, you must either:

• For a domain that you own, add a TXT record to your DNS settings to verify ownership.
• Request access to the domain.

To add a domain:

1. In the domain field, type the domain, then click Add Domain. Amazon S3 domains must be in the format {bucket}.s3.{Region}.amazonaws.com. For example, my-bucket.s3.us-east-1.amazonaws.com. Azure Blob Storage domains are in the format {account}.blob.core.windows.net. For example, myaccount.blob.core.windows.net.

Domain with Add Domain option enabled

1. For domains other than Amazon S3 and Azure Blob Storage domains, on the Add Domain panel:

   • If you own the domain, click I own this domain.
   • If you do not own the domain, click Request access.

Add Domain panel to indicate whether you own the domain

Domain that you own

If you select I own this domain, then Fabricate:

1. Adds an entry to the domain list.
2. Displays the value to add to the DNS settings.
3. Marks the domain as pending verification.

In your DNS settings, add the TXT entry. It can take up to 10 minutes for the DNS changes to propagate.

Fabricate automatically attempts to verify the domain every 5 minutes. To run the verification manually, click the refresh icon.

After it completes the verification, Fabricate marks the domain as verified and available to use.

Domains that you own are available for both workflows and SSO.

Domain that you request access to

If you click Request access, then on the Request Access panel:

1. In the Note field, you can optionally provide a note to explain why you require access to the domain.
2. Under Requested permissions:

   • If the domain is for requests from workflows, check the Outbound requests checkbox.
   • If the domain is for your SSO, check the SSO authentication checkbox.

   You can request access to use a domain for both workflows and SSO.
3. Click Submit Request.

Fabricate adds an entry to the domain lists, and marks the domain as pending request approval.

After the approval is received, Fabricate marks the domain as available to use.

Removing a domain

Before you remove a domain, make sure that it is not in use.

To remove a domain, on the domain entry, click the delete icon.