> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security.md).

# Configure Cortex Cloud Identity Security

You can configure how you want Cortex Cloud Identity Security to behave across your identities.

## Trusted domains

Users may be sharing data across SaaS, Cloud, and on-premises environments externally. In order to highlight untrusted data sharing, this feature allows you to define which domains your organization trusts.

When non-internal identities are discovered, Cortex Cloud Identity Security flags them as **External**, and their domain is checked against your configuration as follows:

* **Match found:** The asset is designated as **Trusted**.
* **No match found:** The asset is designated as **Untrusted**.

#### Required roles

* **Identity Security Administrator:** Can view and manage trusted domains.
* **Identity Security Reader:** Can view trusted domains.

### Manage domains

#### **View existing domains**

To see all the existing domains, do the following:

1. Click **Settings** > **Configurations**.
2. Open **Identity Configuration**.\
   The **Allowed Domains** list is displayed.

#### **Add a domain**

To add a domain to the **Trusted Domains** list, do the following:

1. Click **Settings > Configurations > Identity Configuration**.
2. On the **Trusted Domains** screen, click **Add Domain**.
3. In the **Add Domain** dialog box, enter a domain that you want to designate as trusted, for example [domain.com](http://domain.com), and click **Add**.

{% hint style="info" %}
**Note**

To successfully add a domain to your trusted domains list, it must meet the following criteria:

* **Valid format:** The domain must contain at least one period (.), cannot contain spaces or empty sections, and must end with a valid top-level domain, such as `.com` or `.org`.
* **No duplicates:** Cortex Cloud Identity Security does not support duplicate domain entries.
* **Limits:** You can configure a maximum of 1,000 domains per tenant.
  {% endhint %}

4. The domain you added now appears in the **Trusted Domains** list.

#### **Delete or edit a domain**

If you want to delete or edit a domain, do the following:

1. Click **Settings** > **Configurations** > **Identity Configuration**.
2. On the **Trusted Domains** screen, click the More menu (three dots) for the domain you want to delete or edit, and select either **Delete** or **Edit**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.