Domain Management

Domains are vital in identity management as they form the backbone of an organization's digital identity, enabling secure authentication, email protection, and resource access. Domain Management settings are essential to effectively distinguish between internal and external domains out of all the domains discovered especially from your directory and IdP applications.

The external domains (as marked external in this section) require that these be processed separately and help put focus on accounts/identities that may have been created temporarily / guest usage and remained after the allocated time duration. Such external accounts pose significant security concerns as they are outside the organization's direct control, increasing the risk of unauthorized access, data breaches, and credential compromise. These accounts may lack stringent security measures, such as multi-factor authentication or proper monitoring, making them vulnerable to phishing and misuse. Additionally, insufficient oversight can lead to shadow IT, compliance violations, and exposure to insider threats.

The domains known, trusted and used by organization organically should be marked as Internal by simply setting the Toggle to 'On' against the domain.

perimeters.io is marked as 'Internal'

All the other domains not marked internal are 'External'.