# Email domain whitelist Business
Summary
Allow access only for users with email addresses of your company domains. Complements the access group policy.
# Purpose
- Access control for employees/partners via allowed domains.
- Complements site policy (access groups), does not replace it.
# How it works
- During login, DocCheck checks profession and email domain.
- Access is granted if the profession is allowed OR the email domain is on the whitelist.
- If the profession is not allowed AND the domain is not whitelisted: access is denied.
# Configuration
- Add domains in the login client settings in DocCheck Access.
- You can add multiple domains.
# Notes
- Changes apply to the specific login client.
- Scopes/consents and OAuth2 validation remain unchanged.
- For network-based access control, see IP whitelist.