---
schema_version: "1"
id: 375b0693270539f73d636c827109d03e61553e4c83c5ece5860450d9878f49f2
title: Allow Trusted Sites for Embedded Dashboards
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/analytics/264-0-0/bi_embed_allowlist.md
canonical_url: https://help.salesforce.com/s/articleView?id=analytics.bi_embed_allowlist.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ece43765967e50d604a7033eafbc8ef24a6d8ea32c878f448b04ba7312457afe
description: Embed CRM Analytics in any web page or web-based app. By specifying your trusted sites in the CRM Analytics allowlist, you can include embedded CRM Analytics dashboards in websites and apps outside of Salesforce servers.
products:
  - CRM Analytics
  - Cross Cloud
release: "264"
---
# Allow Trusted Sites for Embedded Dashboards

Embed CRM Analytics in any web page or web-based app. By specifying your trusted sites in the CRM Analytics allowlist, you can include embedded CRM Analytics dashboards in websites and apps outside of Salesforce servers.

First, add a CRM Analytics dashboard component to your site, using [Visualforce embedding](https://help.salesforce.com/articleView?id=bi_embed_vf.htm&language=en_US), [Lightning App Builder](https://help.salesforce.com/articleView?id=bi_embed_lightning.htm&language=en_US), or Lightning Out. This code sample shows how to add a CRM Analytics dashboard component via Lightning Out.

```markup
$Lightning.use("wave:waveApp", function() {  $Lightning.createComponent("wave:waveDashboard", {    dashboardId: "0FKxx00000006bOGAQ"  }, "app");}, url, accessToken)
```

Second, set up an allowlist using the Content Security Policy (CSP). See [Set Up an Allowlist of Trusted Sites for Embedded CRM Analytics Dashboards](https://help.salesforce.com/s/articleView?id=analytics.bi_setup_allowlist.htm&release=264.0.0&type=5 "Specify your trusted sites in the CRM Analytics allowlist, you can include embedded CRM Analytics dashboards in websites and apps outside of Salesforce servers.").

The allowlist for embedded analytics includes the following by default:

- \*.salesforce.com:\*
- \*.salesforce-sites.com:\*
- \*.site.com:\*
- Your org’s company-specific My Domain login URL.