--- title: "Manage Approved Domains" slug: "manage-approved-domains" updated: 2026-06-09T06:46:27Z published: 2026-06-09T06:46:27Z canonical: "support.whatfix.com/manage-approved-domains" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.whatfix.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage Approved Domains Whatfix enables you to define and manage the email domains authorized for learner authentication. This ensures that only learners with an authorized email domain can access [shared](/mirror/docs/share-whatfix-mirror) Mirror Screens, providing a layer of security for your content against unauthorized access. For example, you can add a domain during initial setup or remove an outdated domain when your organization's email structure changes. When a learner accesses a shared Mirror simulation, they must verify their email address against a whitelisted domain and complete OTP authentication before access is granted. For more information, see [Set Up Email-Based Authentication](/mirror/docs/set-up-email-based-authentication). > [!WARNING] > Note: > > - You can whitelist up to 100 domains. > - Learner email addresses used for domain whitelisting authentication are not stored or visible in Whatfix analytics. Expand the following accordions for more details: ****Add a Domain for Whitelisting**** Whatfix enables you to add a new email domain to the whitelist to grant access to learners from that domain. For example, the domain [whatfix.com](http://whatfix.com) on the whitelist ensures all learners with a Whatfix email address can access shared Mirror Screens. Use the following steps to add a domain for domain whitelisting: 1. On the [Whatfix Mirror Dashboard](/mirror/docs/how-can-i-access-the-whatfix-mirror-dashboard), click **Settings**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Settings(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 2. Under **Setup**, click **Approved Domains**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Domain_whitelisting.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 3. Click **Add Domain**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Add_Domain.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 4. Enter a valid domain. For example, whatfix.com ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Enter_Domain_URL.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 5. Click **Add**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_whitelisting_click_Add.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!NOTE] > Info: > > When you add a domain to the whitelist, Whatfix displays the following message: > > ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_added.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) ****Disable a Whitelisted Domain**** Whatfix enables you to temporarily disable a whitelisted domain to block learner access without permanent removal. Once you disable a domain from the whitelisted list, all learners currently authenticated through that domain lose access immediately and see the login page instead. For example, a disabled [partner-org.com](http://partner-org.com) domain blocks learner access during an offboarding period but remains on the whitelist for future re-enablement. Use the following steps to disable a whitelisted domain: 1. On the [Whatfix Mirror Dashboard](/mirror/docs/how-can-i-access-the-whatfix-mirror-dashboard), click **Settings**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Settings(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 2. Under **Setup**, click **Approved Domains**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Domain_whitelisting.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 3. Hover your cursor over the required domain. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Hover_Domain(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 4. Disable the toggle for **Status**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_Whitelisting_Click_Toggle.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 5. Click **Disable**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_Whitelisting_Click_Disable.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!NOTE] > Info: > > When you disable a domain from the whitelist, Whatfix displays the following message: > > ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Disable_a_whitelisted_domain.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!WARNING] > Note: > > Once you disable a domain, all learners authenticated through that domain lose access to shared Mirror simulations. This change might take up to 30 minutes to take effect. ****Delete a Whitelisted Domain**** Whatfix enables you to permanently delete a domain from the whitelist when it is no longer required. Once you delete a domain from the whitelisted list, this change is irreversible. All learners currently authenticated through that domain lose access immediately. For example, after a vendor contract ends, the deleted [old-vendor.com](http://old-vendor.com) domain revokes all learner access from that domain. Use the following steps to delete a whitelisted domain: 1. On the [Whatfix Mirror Dashboard](/mirror/docs/how-can-i-access-the-whatfix-mirror-dashboard), click **Settings**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Settings(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 2. Under **Setup**, click **Approved Domains**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Domain_whitelisting.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 3. Hover your cursor over the required domain. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Hover_Domain(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 4. Click the **Delete** icon. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Delete_icon.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 5. Click **Delete.** ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_Whitelisting_Click_Delete.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!NOTE] > Info: > > When you delete a domain from the whitelist, Whatfix displays the following message:![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Delete_a_Whitelisted_Domain.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!WARNING] > Note: > > Once you delete a domain, this change is irreversible. This change might take up to 30 minutes to take effect. ****Edit a Whitelisted Domain**** Whatfix enables you to update an existing whitelisted domain if the domain name was entered incorrectly or has changed. For example, an updated domain [acmecorp.com](http://acmecorp.com) reflects the corrected name without the need to delete and re-add the original [acme-corp.com](http://acme-corp.com) entry. Use the following steps to edit a whitelisted domain: 1. On the [Whatfix Mirror Dashboard](/mirror/docs/how-can-i-access-the-whatfix-mirror-dashboard), click **Settings**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Settings(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 2. Under **Setup**, click **Approved Domains**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Domain_whitelisting.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 3. Hover your cursor over the required domain. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Hover_Domain(1).png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 4. Click the **Edit** icon. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Click_Edit_icon.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 5. Edit the domain as required. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_Whitelisting_Edit_domain.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) 6. Click **Save**. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Domain_Whitelisting_Click_Save.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) > [!NOTE] > Info: > > When you edit a whitelisted domain, Whatfix displays the following message:![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mirror_Db_Edit_a_Domain.png?sv=2026-02-06&spr=https&st=2026-10-29T12%3A18%3A34Z&se=2026-10-29T13%3A18%3A34Z&sr=c&sp=r&sig=dR4bJlZea8Duxb8ejzG3tnGkb4lhtQVgpXUmvI7gUvk%3D) A replica of an application screen captured based on a UI element.