{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":10581,"path":"employee-service-management/employee-experience-foundation/update-cors-rules-viva.md","title":"Allow cross-domain requests to REST APIs","bundle":null,"doc_type":null,"release":"australia","body":"\n# Allow cross-domain requests to REST APIs\n\nAllow cross-domain requests to REST APIs from a browser-based application in a different domain by creating a record in CORS rules through the Microsoft Viva Connections Integration application scope.\n\n## Before you begin\n\nRole required: admin\n\n## Procedure\n\n1.  Navigate to **All** &gt; **System Web Services** &gt; **REST** &gt; **CORS Rules**.\n\n2.  Select **New**.\n\n3.  On the form, fill in the fields.\n\n<table id=\"table_zxz_qzb_gyb\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nName\n\n</td><td>\n\nName for the CORS rule.\n\n</td></tr><tr><td>\n\nApplication\n\n</td><td>\n\nApplication containing the associated CORS record. This field is automatically set to Employee Center for Microsoft Viva Connections.\n\n</td></tr><tr><td>\n\nREST API\n\n</td><td>\n\nThe REST API this CORS rule applies to. Enter `Microsoft VIVA Integration [sn_now_ms_viva/viva]`.\n\n</td></tr><tr><td>\n\nDomain\n\n</td><td>\n\nThe domain that this CORS rule applies to. Enter `https://{tenantName}.sharepoint.com`. For example, https://nowhkconnect.sharepoint.com.This CORS rule is evaluated against requests from the specified domain. You can specify a domain pattern or an IP address.\n\n</td></tr><tr><td>\n\nMax age\n\n</td><td>\n\nThe number of seconds to cache the client session. After an initial CORS request, further requests from the same client within the specified time do not require a preflight message. If you do not specify a value, the default value of 0 indicates that all requests require a preflight message.\n\n</td></tr><tr><td>\n\nHTTP Methods tab\n\n</td><td>\n\nThe HTTP methods allowed.Only the selected methods can be called from the specified domain. The available methods are:\n\n-   **GET**\n-   **POST**\n-   **PUT**\n-   **PATCH**\n-   **DELETE**\n\n\n</td></tr><tr><td class=\"sub-head\" colspan=\"2\">\n\nHTTP Headers tab\n\n</td></tr><tr><td>\n\nExposed headers\n\n</td><td>\n\nList of headers that the browser is allowed to access from the request.\n\n</td></tr></tbody>\n</table>4.  Select **Submit**.\n\n\n**Parent Topic:**[Configuring Employee Center for Microsoft Viva Connections](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/employee-service-management/employee-experience-foundation/configure-viva.md)\n\n"}}