Overview

Secureframe now gives you greater control over who is added to your Personnel list. With email domain filtering, you can ensure that only users from specific domains are synced into Secureframe through your HR and identity integrations.

This is especially useful if:

• Your organization manages multiple email domains (e.g., @secureframe.com, @acquiredcompany.com)
• You only want to track compliance for employees in a particular domain
• You need to prevent external or non-work accounts from being added automatically
   

How It Works

Secureframe has added domain filtering settings to Personnel settings. Only personnel with an email that matches the allowed domain(s) you’ve configured will be shown on the personnel page

• Applies globally – Domain filters apply across all integrations
• Flexible – You can allow one or multiple domains
• Automatic enforcement – Any personnel outside the approved domains will not be added

Video Tutorial

Setting Up Email Domain Filtering

1. Navigate to Settings
   • Go to Personnel Page > Click gear icon to access Personnel Settings > Email filtering
     
     
2. Enable Filtering
   • Click on the + icon to add filter conditions

3. Review the filter results in the table below that displays included and excluded results

4. Save Changes
   • Once saved, filtering applies automatically across all existing and future integrations
   • Changes in the personnel page will be reflected after the next scheduled integration sync

Understanding the Personnel Table Columns

When reviewing personnel records synced from your vendor integrations, each column in the Included / Excluded tables provides additional user context:

Frequently Asked Questions (FAQ)

Can I change the domains later?

• Yes, you can edit the list anytime by updating filter conditions and saving those conditions. Changes will apply when future integration syncs run and results will be displayed accordingly.

Does this affect policy acceptance or UARs?

• Yes. Because only filtered personnel are included, your compliance workflows (policy assignments, reminders, access reviews) will only apply to the allowed domains.

Tip: Double-check that you include all valid domains for your workforce before saving, to avoid unintentionally excluding active employees.

Can I filter or exclude personnel by Entra ID (Azure AD) groups or licenses, and does Secureframe support true domain-level filtering?

• At this time, Secureframe supports global email domain filtering only, based on the email domain stored on personnel records (for example, @company.com). This filtering is intentionally broad and works by matching the domain string on user email addresses.
• Secureframe does not currently support filtering personnel by Entra ID (Azure AD) groups, licenses, or roles (such as Office 365 F3, E3 license groups, or internal role-based groups). Because of this, domain filtering cannot distinguish between different internal user types (for example, corporate users vs. operational or “club” staff) if they share the same email domain.
• If more granular personnel scoping is needed today, exclusions must be handled manually.