Environment-level domain restrictions

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude
• Connect to Cursor

  Install MCP server on Cursor
• Connect to VS Code

  Install MCP server on VS Code

To enhance control over user activity in your app, Frontegg offers account domain restriction within your environment settings, allowing you to either allow or block user sign-ups when users belonging to specific domains try to access your app. This option becomes especially useful if you want to fine-tune user traffic by allowing or restricting users from accessing it.

Use cases

Suppose you aim to enhance user control in your application by implementing Frontegg's domain restriction feature. By enabling this functionality, you can regulate user sign-ups based on specific domain criteria.

As an administrator, you can input the domains from which users can sign up. For example, @xyzcorporation.com and @partnercompany.com. With domain restrictions enabled, users attempting to sign up with email addresses outside the specified domains are notified that their sign-up is restricted.

Feature highlights

Domain restriction offers the following finely-grained options:

• Deny only - Users belonging to domains in this list are blocked from signing up.
• Allow only - Users belonging to domains in this list are the only ones allowed to sign up for an account in this environment (see note).
• Deny public domain - Users with emails from public domains (e.g., Gmail, Yahoo) are restricted from signing up to this environment.

Environment sign-up restrictions setup

To set environment restrictions by domain, go to [ENVIRONMENT] → Configurations → Keys & domains → Domains → Account sign-up restrictions. Here, you can either Deny domains, Allow domains, or Deny all public domain emails.

Domain restriction via API

Check out our API Reference to perform domain restriction via API.

Account-level IP, domain, and country restrictions

The Frontegg portal gives you a centralized interface to manage domain, IP, and country restrictions for accounts within your environment. Use allowlists or denylists to allow or block access based on configured IPs, domains, or countries—IP and country restrictions apply during sign-up and login, while domain restrictions apply during sign-up and invitation.

Restricting an IP

To restrict access for a specific IP address, follow these steps:

1. Open the Frontegg portal.
2. Navigate to a specific account → click the Security tab → choose "Restrictions".
3. Enable IP address restriction by toggling the switch.
4. Confirm by clicking Enable.
5. Select the restriction type from the dropdown menu: Allow only or Deny only.
6. Click Add IP.
7. Enter the IP address in the IP field. Supported formats: IPv4, IPv6, masks, and CIDR notation.
8. (Optional) Add a description for the IP address.
9. Click Add.
10. To disable an IP restriction without removing the IP from the list, deactivate the toggle in the row of the IP you want to disable.
11. To permanently remove an IP restriction, click the bin icon in the row of the IP you want to remove and click Delete IP.
12. To switch the restriction type for all IP addresses between Deny only and Allow only, select the required restriction list type from the dropdown menu and click Change.

Restricting a domain

To restrict access for specific domains, follow these steps:

1. Open the Frontegg portal.
2. Navigate to a specific account → click the Security tab → choose "Restrictions".
3. Select the Domain tab.
4. Enable Domain restriction by toggling the switch.
5. Confirm by clicking Turn on.
6. Select the restriction type from the dropdown menu: Allow only or Deny only.
7. Click Add domain.
8. Enter the domain in the Domain field. The syntax is auto-validated.
9. Click Add.
10. To permanently remove a domain restriction, click the bin icon in the row of the domain you want to remove and click Delete domain.
11. To switch the restriction type for all domains between Deny only and Allow only, select the required restriction list type from the dropdown menu and click Change.
12. To block all public domain email addresses, toggle the Block all public domain emails switch on.

Restricting a country

To restrict sign-up and login access for specific countries, follow these steps:

1. Open the Frontegg portal.

2. Navigate to a specific account.

3. Click the Security tab.

4. Choose Restrictions.

   

5. Select the Country tab.

6. Enable Country restriction by toggling the switch.

7. Confirm by clicking Enable.

8. Select the restriction type from the dropdown menu: Allow only or Deny only.

9. Click Add country.

10. Select the country from the country list. Country restrictions are stored as ISO 3166-1 alpha-2 country codes.

11. Click Add.

12. To disable country restriction, turn off the Country restriction toggle.

13. To remove a country from the configured list, click the bin icon in the row of the country you want to remove and confirm the deletion.

14. To switch the restriction type for all countries between Deny only and Allow only, select the required restriction list type from the dropdown menu and click Change.