What can I learn from this page? | How to use tenant headers to secure access to DX |
Who is this guide for? | Account Admins, IT |
IT administrators can configure an on-premises or cloud-based proxy server to intercept traffic to DX and insert a X-DX-Tenant header that identifies your account. This allows restricting access to your DX workspace to users within your corporate network and restrict signing into unapproved DX workspaces.
Contact DX support to get header values for your DX account and/or Data Cloud instance. Once your headers are set, please contact DX support to confirm that DX is detecting these headers, and then to have tenant header restrictions enabled for your DX account and/or Data Cloud instance.
When tenant header restrictions are enabled for your DX account:
Users cannot access your DX account outside of your corporate network
Users cannot access accounts besides the one corresponding to your header value
When tenant header restrictions are enabled for your Data Cloud instance:
API requests to Data Cloud are not processed unless they contain a valid header