---
category: [Administration & Integrations, Administration & Integrations/Workday API, Platform and Product Extensions, Platform and Product Extensions/Integration]
nav: wcp_docs
parent_url: /wcp_docs/
title: >- 
  Concept: Cross Origin Resource Sharing (CORS)
layout: subsection
---

Cross Origin Resource Sharing (CORS) is a standard mechanism that enables browsers to make cross-domain requests. A cross origin request occurs when an application on a host domain initiates a request for resources located on another domain. The browser enables the request only if the target domain specifies that it accepts a cross origin request from the initiating domain.

When you develop a browser-based application that requires access to Workday REST APIs, register your application with Workday using the <b>Register API Client</b> task. Workday supports cross-origin requests for the OAuth Authorization Code flow with Proof Key for Code Exchange (PKCE). To configure CORS support, specify the domain or domains that will be requesting resources from your tenant. Add each CORS domain to the <b>Allowed Origins</b> table on the <b>Register API Client</b> task. The API Client will then accept cross origin requests from those domains for the Authorization Code with PKCE grant type.

<b>Note:</b> Workday supports CORS on Workday REST API requests only. Workday doesn't support CORS on other types of API requests, such as SOAP and Reports as a Service (RaaS).

### Related Information

[Cross-Origin Resource Sharing (CORS)](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS)