To further ensure the security of your training content we have added a few advanced security settings you can choose to enable for your WorkRamp platform.
You can find these settings under Settings > Enterprise.
Security & Privacy Settings
Allow external users to access public Libraries | If checked, external users will be able to access any public Libraries in your company's platform. | If unchecked, external users will not be able to access any public Libraries, even if they are sent an individual invitation to the Library. |
Allow creation of external users | If this is checked, contacts who have a domain that is different from your internal domain, can be added to your platform as a user. | If this is unchecked, users with an external domain cannot be added as a user to your WorkRamp platform. |
Allow creation of new users upon assignment and upon adding editors | If checked, new users can be created upon being assigned content, or being added as editors to content. | If unchecked, new users can only be added through the Users page under Settings. |
Internal Domains
Your company's internal domain can be set on the Enterprise Settings page, in the section right above Security & Privacy Settings.
Authorized To Embed (uncommon use case)
The "Authorized To Embed" setting allows Admins to designate which domains are allowed to host an embedded iframe of your WorkRamp instance.
On the back-end, we've implemented this via our security headers that allow this limit which domains are allowed to load a given site in an iframe. By setting this field, we are telling the browser, “don’t allow WorkRamp to load inside an iframe on any site, unless it’s in this list”.
Note: You must have a custom subdomain set to embed your WorkRamp instance on another site and use this setting.
Embed Setting FAQ
What format should I list the domains in?
Example formats would be
my-site.com
,my.site.io
,learning.mysite.com
, etc.If you have more than one sub-domain that you would like to embed your instance on, you can also use a wildcard (
*
), in the format of*.mysite.com
Do not include "https://" or pages on the site (i.e.
my-site.com/learning
)
Do I need to authorize Salesforce if I am using the WorkRamp integration via an iframe tab in Salesforce?
No, we have hard-coded any
vf.force.com
orlightning.force.com
domains as this is a supported application of an embedded instance of WorkRamp.