Skip to main content

Email domain filters: what “Included domains” really means (common gotchas)

This article clarifies a common misunderstanding with email domain filtering: adding an Included domain can change who appears in Personne...

Written by Brady Price

This article clarifies a common misunderstanding with email domain filtering: adding an Included domain can change who appears in Personnel more dramatically than expected.

This is a companion to Filtering Personnel by Email Domain.

Key concept

Included domains acts like an allowlist. If you add one or more included domains, Secureframe will only sync personnel whose email matches those domains, and it can implicitly exclude everyone else.

Examples

  • If you include @company.com, then users with @subsidiary.com will be excluded unless you add that domain too.

  • If you include only a test domain, your Personnel list can look unexpectedly small.

Symptoms that look like a bug (but usually are not)

  • Personnel unexpectedly missing after turning on Included domains.

  • Personnel syncing from one integration but not another because the email domains differ.

What to check

  1. List every domain your company actively uses (including acquired domains and aliases).

  2. Confirm the domain on the user accounts in your HR and identity sources.

  3. Update Included domains to match the full intended set.

Did this answer your question?