Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring Web Settings > Configure Domain settings
Configure Domain settings
 
Related topics:
Email domains can be used to enable end-users to self-register with the cloud service. Users with email addresses belonging to the domains that you add can create a password to self-register with the service. Domains can be configured at either the account level or policy level. Domains can be used to determine which policy users are assigned when they register.
Before reading this section, we recommend that you read Proxied connections.
Permissions implications
Administrators who have permissions only for individual policies can access domain configuration only from within the policy, and they cannot amend account-level domains. They also receive a restricted set of controls when editing policy-level domains. From this view, they can see all domains but have editing rights only to the policy-level domains associated with their policy.
Legal requirements
Your terms and conditions for use of the service include a clause that restricts the use of domains to those that are legally registered to your organization. Bulk registering end users explains the process of bulk registration, where the cloud service sends email to a list of email addresses uploaded to the service. The legal restriction is to prevent someone from maliciously or unintentionally spamming a third party with email originating from the cloud service.
Policy-level domains
Policy-level domains are created in the policies themselves. Users with an email address in this domain are registered to the policy to which the domain is assigned. this is useful if you have users in your account with different email domains, who you wish to manage using different policies.
To create a policy-level domain:
1.
Select Web > Policy Management > Policies.
2.
3.
Click the End Users tab.
4.
No policy-level domain can exist in multiple policies or accounts.
When you are adding a policy-level domain, some options are grayed out, because they are only applicable to account-level domains.
Account-level domains
Account-level domains can be added in order to allow users to self-register to any policy in your account. The actual policy they are assigned to is determined by the IP address from which they register (see Proxied connections).
Account-level domains must have a default policy for remote users. Users registering with email addresses belonging to the domain, and connecting from unknown IP addresses, will be added to this default policy. If there is no default policy, then remote users cannot register and receive a error message when they try to do so.
 
Note 
Click Web > Settings > Domains to see the end-user registration domains, and the policy each domain is associated with. If they are account-level domains, the words "By connection" are shown instead of a policy name.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring Web Settings > Configure Domain settings
Copyright 2020 Forcepoint. All rights reserved.