Loading
Agentforce Contact Center
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Set Security Protocols for Your Messaging for Web Deployment

            You are here:

            1. Salesforce Help
            2. Docs
            3. Agentforce Contact Center

            Set Security Protocols for Your Messaging for Web Deployment

            To successfully use Messaging for Web, add your experience site or external website domain to a Cross-Origin Resource Sharing (CORS) allowlist. If you change your domain, remember to update the CORS allowlist.

            Required Editions

            The CORS allowlist lets web browsers request resources from other origins, like allowing access to supported Salesforce APIs, Apex REST resources, and Lightning Out from JavaScript code in a web browser.

            You must add any domain that you use, from testing to production, to your CORS allowlist. For example, if you start in a sandbox and then deploy to production, add both the sandbox and the production domains.

            Add Your External Website Domain to a CORS Allowlist

            After completing setup, add your domain to the CORS allowlist. Add your CORS allowlist entries of URLs for the pages where you deploy messaging. The page you add is where customers access the messaging window. The origin URL pattern must include the HTTP or HTTPS protocol and a domain name. The wildcard character (*) is supported and must be in front of a second-level domain name. For example, https://*.example.com (https://%2A.example.com/) adds all subdomains of example.com (http://example.com/) to the allowlist.

            1. From Setup, enter CORS in the Quick Find box, and then select CORS.
            2. Select New.
            3. Enter an origin URL pattern.
            4. Save your work.

            Add Your Experience Builder Site Domain to a CORS Allowlist

            After completing setup, add your Experience Builder site domain to your CORS allowlist. If notice an issue with the *.live-preview domain, add that to the CORS allow list.

            1. To confirm your site domain, from Setup, enter Digital Experiences in the Quick Find box, and then select Settings. Copy the URL from the Domain section.
            2. From Setup, enter CORS in the Quick Find box, and then select CORS.
            3. Select New.
            4. Enter an origin URL pattern.
            5. Save your work.
             
            Loading
            Salesforce Help | Article