> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cognite.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Register applications

> Step-by-step guide for organization administrators to register trusted applications in Cognite Data Fusion (CDF).

As an organization administrator, you can register trusted applications and specify which domains may access CDF APIs. When a browser application calls CDF, the request originates from a specific domain. Registration lets you control which web applications are allowed to make those browser-based requests and blocks unauthorized origins.

Registration lets CDF recognize trusted applications and configure domain-based validation and Cross-Origin Resource Sharing (CORS) policy. It reduces the attack surface for browser-based access by letting you define trusted origins from which requests to CDF can be made. Application registration does not replace authentication, authorization, or other security controls.

<Info>
  Registering in CDF is separate from registering in your identity provider (IdP). For web applications, complete both steps: register in your IdP for authentication ([Microsoft Entra ID](/cdf/access/entra/guides/register_custom_webapp) or [Amazon Cognito](/cdf/access/aws/guides/register_custom_webapp_cognito)), then register in CDF to configure allowed origins.
</Info>

## Prerequisites

* You must be an [organization administrator](/cdf/admin/manage_organization/add_organization_admin).
* The application must already be registered in your organization's IdP if it uses interactive or service principal authentication.

<Note>
  Domains for CDF applications such as [Maintain](/cdf/maintain/), [InField](/cdf/infield/), and [Flows](/cdf/flows/) are registered in your organization by default.

  For [Flows](/cdf/flows/) apps, we recommend registering each app individually for clearer ownership, security, and future compatibility. Application registrations validate trusted domains, not individual application identities, so if multiple applications share a domain, a request from an unregistered application may still be accepted if another application on that domain is already registered.
</Note>

## Register an application

<Steps>
  <Step title="Open the Applications tab">
    Sign in to [Cognite Data Fusion](https://fusion.cognite.com) and select the <span class="ui-element">Admin</span> workspace.

    Navigate to <span class="ui-element">My organization</span> > <span class="ui-element">Applications</span>.
  </Step>

  <Step title="Register an application">
    Select <span class="ui-element">Register application</span>.

    In the <span class="ui-element">Register application</span> dialog, fill in the fields shown in the form.
  </Step>

  <Step title="Confirm">
    Select <span class="ui-element">Register</span>.

    <Check>
      The application appears in the list on the <span class="ui-element">Applications</span> tab.
    </Check>
  </Step>
</Steps>

## Update app registration

<Steps>
  <Step title="Open the application menu">
    On the <span class="ui-element">Applications</span> tab, find the application in the list. Open the row menu (**...**) and select <span class="ui-element">Edit</span>.
  </Step>

  <Step title="Update fields">
    Change the <span class="ui-element">Name</span>, <span class="ui-element">Description</span>, <span class="ui-element">Projects</span>, or <span class="ui-element">Allowed origins</span> as needed.
  </Step>

  <Step title="Save changes">
    Select <span class="ui-element">Save</span>.
  </Step>
</Steps>

## Delete app registration

<Steps>
  <Step title="Open the application menu">
    On the <span class="ui-element">Applications</span> tab, find the application in the list. Open the row menu (**...**) and select <span class="ui-element">Delete</span>.
  </Step>

  <Step title="Confirm deletion">
    Confirm that you want to delete the application registration and select <span class="ui-element">Delete</span>.
  </Step>
</Steps>

<Warning>
  After you delete an app registration, requests from that app are blocked until you register it again with the correct allowed origins.
</Warning>

## Further reading

* [Add an organization administrator](/cdf/admin/manage_organization/add_organization_admin)
* [Register and configure applications and components](/cdf/access/entra/guides/configure_apps_oidc)
* [Access management concepts](/cdf/access/concepts/concepts)