Configure Domain settings

Documentation | Support

Configuring Web Settings > Configure Domain settings

Configure Domain settings

Related topics:

Policy-level domains

Account-level domains

Editing a domain

Permissions implications

Legal requirements

Email domains can be used to enable end-users to self-register with the cloud service. Users with email addresses belonging to the domains that you add can create a password to self-register with the service. Domains can be configured at either the account level or policy level. Domains can be used to determine which policy users are assigned when they register.

Before reading this section, we recommend that you read Proxied connections.

Permissions implications

Administrators who have permissions only for individual policies can access domain configuration only from within the policy, and they cannot amend account-level domains. They also receive a restricted set of controls when editing policy-level domains. From this view, they can see all domains but have editing rights only to the policy-level domains associated with their policy.

Legal requirements

Your terms and conditions for use of the service include a clause that restricts the use of domains to those that are legally registered to your organization. Bulk registering end users explains the process of bulk registration, where the cloud service sends email to a list of email addresses uploaded to the service. The legal restriction is to prevent someone from maliciously or unintentionally spamming a third party with email originating from the cloud service.

Policy-level domains

Policy-level domains are created in the policies themselves. Users with an email address in this domain are registered to the policy to which the domain is assigned. this is useful if you have users in your account with different email domains, who you wish to manage using different policies.

To create a policy-level domain:

Select Web > Policy Management > Policies.

Click the name of the policy to open.

Click the End Users tab.

Under Self Registration, click Add.

No policy-level domain can exist in multiple policies or accounts.

When you are adding a policy-level domain, some options are grayed out, because they are only applicable to account-level domains.

Account-level domains

Account-level domains can be added in order to allow users to self-register to any policy in your account. The actual policy they are assigned to is determined by the IP address from which they register (see Proxied connections).

Account-level domains must have a default policy for remote users. Users registering with email addresses belonging to the domain, and connecting from unknown IP addresses, will be added to this default policy. If there is no default policy, then remote users cannot register and receive a error message when they try to do so.


	Note If all users within your account are on a single email domain and you have multiple policies, you must configure an account-level domain assigned to all policies.

Click Web > Settings > Domains to see the end-user registration domains, and the policy each domain is associated with. If they are account-level domains, the words "By connection" are shown instead of a policy name.

Configuring Web Settings > Configure Domain settings