Set up trusted media domains for secure file upload
Virtual Agent uses trusted media domains to check the URLs of attachment files before uploading them. If a URL is not from a trusted domain, Virtual Agent will not upload the attachment.
Before you begin
Role required: admin
About this task
For custom chat integrations, specify trusted media domains in either the Provider [sys_cs_provider] table or the Provider Channel Identity [sys_cs_provider_application] table. The trusted media domain values in the Provider Channel Identity table override the corresponding values in the Provider table.
Pre-built integrations, such as Slack, Microsoft Teams, and Workplace from Facebook, have default trusted media domain values set at the provider level, in the Provider [sys_cs_provider] table. To change the default trusted values, specify the different trusted media domains in the Provider Channel Identity [sys_cs_provider_application] table.
Procedure
Navigate to All > sys_cs_provider_application.list > Provider Channel Identity and click New.
On the form, fill in the fields.
| Name | Name of the channel identity. For example: `VA SMS Twilio Adapter` |
| Provider | Select the name of your provider application that you set up previously. For example: `VA SMS Twilio Adapter Pro`. |
| Message auth | Message authentication for the channel identifier. |
| Inbound ID | Identifier for your bot. For example, the phone number. |
| Trusted media domains | Comma-separated list of one or more trusted domains for the provider. For example: Note: Subdomains under a trusted domain are also trusted. You do not need to specify subdomains in this list. If this field is not visible, you can configure the form layout to show it. For security reasons, Virtual Agent checks that the URLs for attachments in conversations are from trusted domains specified here. If the URL is not for a trusted domain, Virtual Agent doesn't upload the attachment. If an attachment upload fails because Virtual Agent didn't trust the domain, Virtual Agent does not inform the end user why the attachment upload failed. Note: For Trusted Domains In custom chat integrations, the values specified in the Trusted media domains field of the Provider Channel Identities table [sys_cs_provider_application] takes precedence over the Connections table [sys_cs_provider] and hence overrides. |
| Short description | Description for your channel identifier. |
Click Submit.
Create additional channel identifiers using the same procedure.
Parent Topic:Supported Virtual Agent and Agent Chat features for custom chat integrations