Manage Approved Domains

Whatfix enables you to define and manage the email domains authorized for learner authentication. This ensures that only learners with an authorized email domain can access shared Mirror Screens, providing a layer of security for your content against unauthorized access. For example, you can add a domain during initial setup or remove an outdated domain when your organization's email structure changes.

When a learner accesses a shared Mirror simulation, they must verify their email address against a whitelisted domain and complete OTP authentication before access is granted.

For more information, see Set Up Email-Based Authentication.

Note:
You can whitelist up to 100 domains.
Learner email addresses used for domain whitelisting authentication are not stored or visible in Whatfix analytics.

Expand the following accordions for more details:

Add a Domain for Whitelisting

Whatfix enables you to add a new email domain to the whitelist to grant access to learners from that domain.

For example, the domain whatfix.com on the whitelist ensures all learners with a Whatfix email address can access shared Mirror Screens.

Use the following steps to add a domain for domain whitelisting:

On the Whatfix Mirror Dashboard, click Settings.
Under Setup, click Approved Domains.
Click Add Domain.
Enter a valid domain. For example, whatfix.com
Click Add.

Info:
When you add a domain to the whitelist, Whatfix displays the following message:

Disable a Whitelisted Domain

Whatfix enables you to temporarily disable a whitelisted domain to block learner access without permanent removal. Once you disable a domain from the whitelisted list, all learners currently authenticated through that domain lose access immediately and see the login page instead.

For example, a disabled partner-org.com domain blocks learner access during an offboarding period but remains on the whitelist for future re-enablement.

Use the following steps to disable a whitelisted domain:

On the Whatfix Mirror Dashboard, click Settings.
Under Setup, click Approved Domains.
Hover your cursor over the required domain.
Disable the toggle for Status.
Click Disable.

Info:
When you disable a domain from the whitelist, Whatfix displays the following message:

Note:
Once you disable a domain, all learners authenticated through that domain lose access to shared Mirror simulations. This change might take up to 30 minutes to take effect.

Delete a Whitelisted Domain

Whatfix enables you to permanently delete a domain from the whitelist when it is no longer required. Once you delete a domain from the whitelisted list, this change is irreversible. All learners currently authenticated through that domain lose access immediately.

For example, after a vendor contract ends, the deleted old-vendor.com domain revokes all learner access from that domain.

Use the following steps to delete a whitelisted domain:

On the Whatfix Mirror Dashboard, click Settings.
Under Setup, click Approved Domains.
Hover your cursor over the required domain.
Click the Delete icon.
Click Delete.

Info:
When you delete a domain from the whitelist, Whatfix displays the following message:

Note:
Once you delete a domain, this change is irreversible. This change might take up to 30 minutes to take effect.

Edit a Whitelisted Domain

Whatfix enables you to update an existing whitelisted domain if the domain name was entered incorrectly or has changed.

For example, an updated domain acmecorp.com reflects the corrected name without the need to delete and re-add the original acme-corp.com entry.

Use the following steps to edit a whitelisted domain:

On the Whatfix Mirror Dashboard, click Settings.
Under Setup, click Approved Domains.
Hover your cursor over the required domain.
Click the Edit icon.
Edit the domain as required.
Click Save.

Info:
When you edit a whitelisted domain, Whatfix displays the following message: