Skip to main content
Security and Privacy Settings

Employee Learning Cloud: Learn about the different security settings available for your Enterprise

Support avatar
Written by Support
Updated over a week ago

To further ensure the security of your training content we have added a few advanced security settings you can choose to enable for your WorkRamp platform.
You can find these settings under Settings > Enterprise. 

Security & Privacy Settings

Allow external users to access public Libraries

If checked, external users will be able to access any public Libraries in your company's platform.

If unchecked, external users will not be able to access any public Libraries, even if they are sent an individual invitation to the Library.

Allow creation of external users

If this is checked, contacts who have a domain that is different from your internal domain, can be added to your platform as a user.

If this is unchecked, users with an external domain cannot be added as a user to your WorkRamp platform.

Allow creation of new users upon assignment and upon adding editors

If checked, new users can be created upon being assigned content, or being added as editors to content.

If unchecked, new users can only be added through the Users page under Settings.
Note: new users can still be created through Share Links

Internal Domains

Your company's internal domain can be set on the Enterprise Settings page, in the section right above Security & Privacy Settings. 

Authorized To Embed (uncommon use case)

The "Authorized To Embed" setting allows Admins to designate which domains are allowed to host an embedded iframe of your WorkRamp instance.

On the back-end, we've implemented this via our security headers that allow this limit which domains are allowed to load a given site in an iframe. By setting this field, we are telling the browser, “don’t allow WorkRamp to load inside an iframe on any site, unless it’s in this list”.

Note: You must have a custom subdomain set to embed your WorkRamp instance on another site and use this setting.

Embed Setting FAQ

  1. What format should I list the domains in?

    1. Example formats would be my-site.com, my.site.io, learning.mysite.com, etc.

    2. If you have more than one sub-domain that you would like to embed your instance on, you can also use a wildcard (*), in the format of *.mysite.com

    3. Do not include "https://" or pages on the site (i.e. my-site.com/learning)

  2. Do I need to authorize Salesforce if I am using the WorkRamp integration via an iframe tab in Salesforce?

    1. No, we have hard-coded any vf.force.com or lightning.force.com domains as this is a supported application of an embedded instance of WorkRamp.

Did this answer your question?