Publish and Embed Forms

Publish a public form, allow embed domains, set trusted IPs, and review submissions.

Use a public link to share a form. Use an iframe to show the same form on your website. A visitor does not need a Broker Panel account to open or submit an active public form.

Share A Form

A new form is active by default. The form builder success screen shows Share Your Form: select Display Language if the form has a saved translation, then use Direct Link to copy the Form URL or the open icon to test it in a new browser tab.

For an existing form, use Copy Form URL or Open Form in the row’s Manage menu, or the copy icon in the Direct URL column. See Form Center for form building and management.

Allow An External Embed Domain

The allowed-domain list applies to all forms for your broker. The form can always run in a same-origin iframe. You must add each external website origin before that website can show the form.

1. Select Form Settings in Form Center.
2. Select Manage Embed Domains.
3. Enter one origin per line in Allowed Domains.
4. Select Save Changes.

Use a full HTTPS origin. The saved value includes the protocol, host, and port when present. The panel removes any path from the saved value. HTTP is accepted only for localhost through this dialog.

Add each required origin separately. A different protocol, subdomain, or port is a different origin. If you clear Allowed Domains, external websites cannot frame the forms.

Embed An Existing Form

Add the external website origin first. Then copy the generated iframe code.

1. Find the form in Form Center.
2. Select Manage.
3. Select Get Embed Code.
4. Select a value in Language.
5. Select Copy.

Paste the copied iframe code into the HTML for your website. The generated iframe uses the full width of its container and a height of 500 pixels. You can change these display values in your website code.

The Language list contains English and the saved translations for that form. The generated URL includes the selected language when you do not select English.

You can also copy the same iframe code from Embed Code on the form builder success screen.

Active And Inactive Forms

An Active form can load from its public URL and can accept submissions.

To stop a form:

1. Find the form in Form Center.
2. Select Manage.
3. Select Deactivate.

The status changes to Inactive. The direct URL and existing iframe code no longer load the form. The submission service also rejects a submission if the form is inactive.

To publish the form again, select Manage, and then select Activate.

Trusted IPs And Rate Limits

Public form submissions have a broker-wide rate limit. One source IP can send five form submissions in a 60-minute window for one broker. The next submission is blocked until the rate-limit window permits another submission.

A trusted IP bypasses only this public form submission rate limit. It does not bypass form status checks, spam checks, or field validation.

1. Select Form Settings in Form Center.
2. Select Trusted IPs.
3. Enter one IP address per line in Trusted IP Addresses.
4. Select Save Changes.

The panel accepts individual IPv4 and IPv6 addresses. It does not accept IP ranges or CIDR notation. Clear the field and save to disable the trusted-IP bypass.

Only add an IP that you control and trust. Do not add a visitor IP to avoid a temporary rate limit.

Review Submissions

A successful submission creates a New Service request with Form as its source. The form’s Approval value controls what happens next:

• Manual keeps the request pending for staff review.
• Automatic starts system approval after the request is created. If system approval cannot complete, the request stays pending.

To review submissions for one form:

1. Find the form in Form Center.
2. Select Manage.
3. Select View Submissions.

The panel opens the Requests page and applies the form filter. A successful visitor sees the configured success message. The public form also redirects the visitor if the form has a redirect URL.

Troubleshooting

Direct-Link Or Embed Controls Are Not Available

The broker does not have a slug. Contact support to configure it.

The Public Form Does Not Load

Confirm that the row has the Active status. Then use Manage > Open Form to test the current URL. An incorrect broker slug, an incorrect form slug, or an inactive form returns a not-found page.

The Website Refuses To Show The Iframe

Open Form Settings > Manage Embed Domains. Confirm that Allowed Domains contains the exact parent website origin. Check the protocol, subdomain, and port. Save the change and reload the parent website.

If the embed-domain lookup fails, the panel permits same-origin framing only.

Manage Embed Domains Rejects An Entry

Enter one full URL per line. Use HTTPS for an external website. Remove paths that are not part of the website origin.

Trusted IPs Rejects An Entry

Enter one individual IPv4 or IPv6 address per line. Remove ranges, CIDR suffixes, and other text.

A Visitor Sees A Rate-Limit Message

The source IP reached five submissions in the 60-minute window for this broker. Wait for the window to permit another submission. Use Trusted IPs only for a fixed source IP that you control.

A Submission Does Not Appear In Requests

Confirm that the visitor saw the success message. Use Manage > View Submissions to apply the correct form filter. If submission still fails, test the public form and correct the field error that it shows.