> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security.md).

# Configure Cortex Cloud Identity Security

You can configure how you want Cortex Cloud Identity Security to behave across your identities.

## Trusted domains

Users may be sharing data across SaaS, Cloud, and on-premises environments externally. In order to highlight untrusted data sharing, this feature allows you to define which domains your organization trusts.

When non-internal identities are discovered, Cortex Cloud Identity Security flags them as **External**, and their domain is checked against your configuration as follows:

* **Match found:** The asset is designated as **Trusted**.
* **No match found:** The asset is designated as **Untrusted**.

#### Required roles

* **Identity Security Administrator:** Can view and manage trusted domains.
* **Identity Security Reader:** Can view trusted domains.

### Manage domains

#### **View existing domains**

To see all the existing domains, do the following:

1. Click **Settings** > **Configurations**.
2. Open **Identity Configuration**.\
   The **Allowed Domains** list is displayed.

#### **Add a domain**

To add a domain to the **Trusted Domains** list, do the following:

1. Click **Settings > Configurations > Identity Configuration**.
2. On the **Trusted Domains** screen, click **Add Domain**.
3. In the **Add Domain** dialog box, enter a domain that you want to designate as trusted, for example [domain.com](http://domain.com), and click **Add**.

{% hint style="info" %}
**Note**

To successfully add a domain to your trusted domains list, it must meet the following criteria:

* **Valid format:** The domain must contain at least one period (.), cannot contain spaces or empty sections, and must end with a valid top-level domain, such as `.com` or `.org`.
* **No duplicates:** Cortex Cloud Identity Security does not support duplicate domain entries.
* **Limits:** You can configure a maximum of 1,000 domains per tenant.
  {% endhint %}

4. The domain you added now appears in the **Trusted Domains** list.

#### **Delete or edit a domain**

If you want to delete or edit a domain, do the following:

1. Click **Settings** > **Configurations** > **Identity Configuration**.
2. On the **Trusted Domains** screen, click the More menu (three dots) for the domain you want to delete or edit, and select either **Delete** or **Edit**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.