Managing allowed domains for an account

The Allowed Domains page of Account Settings contains the list of domains for the account, including:

• Domains for workflows to connect to.

• Domains for single sign-on (SSO).

• Amazon S3 domains that the Data Agent can write data to. Amazon S3 domains can also be used for workflows.

• An Azure Blob Storage account that the Data Agent can write data to. Azure Blob Storage domains can also be used for workflows.

• Kafka brokers to export data to.

For each domain, the list includes:

• Whether the domain is verified. Until the domain is verified, you cannot use it.

• Where the domain can be used.

Verified domain with indicators of how the domain can be used

Note that for each workspace, you configure the secrets that are used to connect to the domains. For more information, go to Configuring available secrets for a workspace.

Adding a domain

All domains must be verified before you can use them.

Amazon S3 and Azure Blob Storage domains are verified automatically.

For other types of domains, when you add the domain to the list, you must either:

• For a domain that you own, add a TXT record to your DNS settings to verify ownership.

• Request access to the domain.

Providing the domain name

To add a domain, in the domain field, type the domain, then click Add Domain.

Note that:

• Amazon S3 domains must be in the format {bucket}.s3.{Region}.amazonaws.com. For example, my-bucket.s3.us-east-1.amazonaws.com.

• Azure Blob Storage domains are in the format {account}.blob.core.windows.net. For example, myaccount.blob.core.windows.net.

Domain with Add Domain option enabled

Completing an automatically verified domain

An automatically verified domain can only be used for outbound requests, and cannot allow subdomain traffic.

For automatically verified domains, on the Add Domain panel, click Add Domain.

Selecting the requested permissions

You can use domains that are not automatically verified for both outbound requests and SSO authentication. These domains can also allow subdomain traffic.

On the Add Domain panel, under Requested permissions:

Add Domain panel

1. If the domain is for requests from workflows:

   1. Check the Outbound requests checkbox.

   2. To also allow outbound requests to subdomains, check the Allow traffic from subdomains checkbox. For example, for the domain example.com, if you allow subdomains, then api.example.com also automatically accepts requests.

2. If the domain is for your SSO, check the SSO authentication checkbox.

Verifying a domain that you own

On the Add Domain panel, if you own the domain, click I own this domain.

Fabricate:

1. Adds an entry to the domain list.

2. Displays the value to add to the DNS settings.

3. Marks the domain as pending verification.

In your DNS settings, add the TXT entry. It can take up to 10 minutes for the DNS changes to propagate.

Fabricate automatically attempts to verify the domain every 5 minutes. To run the verification manually, click the refresh icon.

After it completes the verification, Fabricate marks the domain as verified and available to use.

Requesting access to a domain

On the Add Domain panel, if you do not own the domain, click Request access

If you click Request access, then on the Request Access panel:

Request Access panel to send the access request for the domain

1. In the Note field, optionally provide a note to explain why you require access to the domain.

2. Click Submit Request.

Fabricate adds an entry to the domain lists, and marks the domain as pending request approval.

After the approval is received, Fabricate marks the domain as available to use.

Editing a domain that you own

For a domain that you own, to change the domain configuration, click the edit icon for the domain.

You cannot edit domains that you do not own.

When you edit a domain, you can change whether the domain is used for outbound requests or SSO authentication, and for outbound requests, whether to allow subdomains.

After you complete the changes, click Save.

Removing a domain

Before you remove a domain, make sure that it is not in use.

To remove a domain, on the domain entry, click the delete icon.