---
sourceDocument: Zurich Conversational Interfaces
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/conversational-interfaces

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Conversational Interfaces

ft:clusterId :

    - convint

bundleId :

    - convint

workflow :

    - Platform


---

# Set up trusted media domains for secure file upload

# Set up trusted media domains for secure file upload {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Virtual Agent uses trusted media domains to check the URLs of attachment files before
uploading them. If a URL is not from a trusted domain, Virtual Agent will not upload the
attachment.

## Before you begin

Role required: admin

## About this task

For custom chat integrations, specify trusted media domains in either the Provider
\[sys_cs_provider\] table or the Provider Channel Identity
\[sys_cs_provider_application\] table. The trusted media domain values in the Provider
Channel Identity table override the corresponding values in the Provider table.

Pre-built integrations, such as Slack, Microsoft Teams,
and Workplace from Facebook, have default trusted media domain values
set at the provider level, in the Provider \[sys_cs_provider\] table. To change the
default trusted values, specify the different trusted media domains in the Provider
Channel Identity \[sys_cs_provider_application\] table.

## Procedure

1. Navigate to Allsys_cs_provider_application.listProvider Channel Identity and click New.
2. On the form, fill in the fields.  
   {#ccif-secure-file-upload__table_xsb_sy5_tnb__entry__2}

   |   |   |
   |-|-|
   | Name | Name of the channel identity. For example: <kbd class="ph userinput">VA SMS Twilio Adapter</kbd> |
   | Provider | Select the name of your provider application that you set up previously. For example: <kbd class="ph userinput">VA SMS Twilio Adapter Pro</kbd>. |
   | Message auth | Message authentication for the channel identifier. |
   | Inbound ID | Identifier for your bot. For example, the phone number. |
   | Trusted media domains | Comma-separated list of one or more trusted domains for the provider. For example: <kbd class="ph userinput">twilio.com</kbd>, <kbd class="ph userinput">slack.com</kbd> Note: Subdomains under a trusted domain are also trusted. You do not need to specify subdomains in this list. If this field is not visible, you can [configure the form layout](https://www.servicenow.com/docs/access?context=configure-form-layout&version=zurich&pubname=zurich-platform-administration&ft:locale=en-US) to show it. For security reasons, Virtual Agent checks that the URLs for attachments in conversations are from trusted domains specified here. If the URL is not for a trusted domain, Virtual Agent doesn't upload the attachment. If an attachment upload fails because Virtual Agent didn't trust the domain, Virtual Agent does not inform the end user why the attachment upload failed. Note: For Trusted Domains In custom chat integrations, the values specified in the Trusted media domains field of the Provider Channel Identities table \[sys_cs_provider_application\] takes precedence over the Connections table \[sys_cs_provider\] and hence overrides. |
   | Short description | Description for your channel identifier. |
   [Table 1. Provider Channel Identity form]

   {#ccif-secure-file-upload__table_xsb_sy5_tnb}
3. Click Submit.
4. **Optional:** Create additional channel identifiers using the same procedure.

*[\>]: and then