> For the complete documentation index, see [llms.txt](https://docs.tonic.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/account-domains.md).

# Managing allowed domains for an account

The **Allowed Domains** page of **Account Settings** contains the list of domains for the account, including:

* Domains for workflows to connect to.
* Domains for single sign-on (SSO).
* Amazon S3 domains that the Data Agent can write data to. Amazon S3 domains can also be used for workflows.
* An Azure Blob Storage account that the Data Agent can write data to. Azure Blob Storage domains can also be used for workflows.
* Kafka brokers to export data to.

For each domain, the list includes:

* Whether the domain is verified. Until the domain is verified, you cannot use it.
* Where the domain can be used.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FWySa9IdxBMkrcszdUzgM%2FAccount_DomainAllowedUse.png?alt=media&amp;token=2a4211fb-ad51-4174-9a01-ce50f14938c7" alt=""><figcaption><p>Verified domain with indicators of how the domain can be used</p></figcaption></figure>

Note that for each workspace, you configure the secrets that are used to connect to the domains. For more information, go to [Configuring available secrets for a workspace](/fabricate/workspaces/workspace-secrets.md).

## Adding a domain

All domains must be verified before you can use them.

Amazon S3 and Azure Blob Storage domains are verified automatically.

For other types of domains, when you add the domain to the list, you must either:

* For a domain that you own, add a TXT record to your DNS settings to verify ownership.
* Request access to the domain.

### Providing the domain name

To add a domain, in the domain field, type the domain, then click **Add Domain**.

Note that:

* Amazon S3 domains must be in the format `{bucket}.s3.{Region}.amazonaws.com`. For example, `my-bucket.s3.us-east-1.amazonaws.com`.
* Azure Blob Storage domains are in the format `{account}.blob.core.windows.net`. For example, `myaccount.blob.core.windows.net`.

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FzaYrZkiaxE4hvLawlKuj%2FAccount_AddDomain.png?alt=media&amp;token=cbf489a2-26be-4a73-b357-16a658e42932" alt=""><figcaption><p>Domain with Add Domain option enabled</p></figcaption></figure>

### Completing an automatically verified domain

An automatically verified domain can only be used for outbound requests, and cannot allow subdomain traffic.

For automatically verified domains, on the **Add Domain** panel, click **Add Domain**.

### Selecting the requested permissions

You can use domains that are not automatically verified for both outbound requests and SSO authentication. These domains can also allow subdomain traffic.

On the **Add Domain** panel, under **Requested permissions**:

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FkCVPGYKXuVhLVMt1FoJL%2FAccount_AddDomainPanel.png?alt=media&amp;token=c6dae158-7eb7-4d08-bbba-b8209e3282e0" alt=""><figcaption><p>Add Domain panel</p></figcaption></figure>

1. If the domain is for requests from workflows:
   1. Check the **Outbound requests** checkbox.
   2. To also allow outbound requests to subdomains, check the **Allow traffic from subdomains** checkbox. For example, for the domain `example.com`, if you allow subdomains, then `api.example.com` also automatically accepts requests.
2. If the domain is for your SSO, check the **SSO authentication** checkbox.

### Verifying a domain that you own

On the **Add Domain** panel, if you own the domain, click **I own this domain**.

Fabricate:

1. Adds an entry to the domain list.
2. Displays the value to add to the DNS settings.
3. Marks the domain as pending verification.

In your DNS settings, add the TXT entry. It can take up to 10 minutes for the DNS changes to propagate.

Fabricate automatically attempts to verify the domain every 5 minutes. To run the verification manually, click the refresh icon.

After it completes the verification, Fabricate marks the domain as verified and available to use.

### Requesting access to a domain

On the **Add Domain** panel, if you do not own the domain, click Request access

If you click **Request access**, then on the **Request Access** panel:

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2FK3fcnYI8xX1LfP7gBHIv%2FAccount_DomainRequestAccess.png?alt=media&amp;token=dd131190-6b06-4350-be2a-49c8220fa1c4" alt=""><figcaption><p>Request Access panel to send the access request for the domain</p></figcaption></figure>

1. In the **Note** field, optionally provide a note to explain why you require access to the domain.
2. Click **Submit Request**.

Fabricate adds an entry to the domain lists, and marks the domain as pending request approval.

After the approval is received, Fabricate marks the domain as available to use.

## Editing a domain that you own <a href="#domain-change-config" id="domain-change-config"></a>

For a domain that you own, to change the domain configuration, click the edit icon for the domain.

You cannot edit domains that you do not own.

When you edit a domain, you can change whether the domain is used for outbound requests or SSO authentication, and for outbound requests, whether to allow subdomains.

After you complete the changes, click **Save**.

## Removing a domain

Before you remove a domain, make sure that it is not in use.

To remove a domain, on the domain entry, click the delete icon.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/account-domains.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.