# Email domain whitelist Business

Summary

Allow access only for users with email addresses of your company domains. Complements the access group policy.

# Purpose

  • Access control for employees/partners via allowed domains.
  • Complements site policy (access groups), does not replace it.

# How it works

  • During login, DocCheck checks profession and email domain.
  • Access is granted if the profession is allowed OR the email domain is on the whitelist.
  • If the profession is not allowed AND the domain is not whitelisted: access is denied.

# Configuration

  • Add domains in the login client settings in DocCheck Access.
  • You can add multiple domains.

# Notes

  • Changes apply to the specific login client.
  • Scopes/consents and OAuth2 validation remain unchanged.
  • For network-based access control, see IP whitelist.