Zoom Phone Smart Embed: notApprovedDomain for development-mode app — how to allowlist parent domain?

Phone Phone Smart Embed
1

Hi Zoom Developer team — Marketplace reviewer suggested I bring this to the dev forum.

What’s happening

Our Marketplace app (User-managed, currently in Development mode) embeds the Zoom Phone Smart Embed iframe on our application’s web origin. After the user signs into Zoom inside the iframe, Zoom redirects to:

https://applications.zoom.us/integration/phone/embeddablephone/result?originDomain=https://<our-app-origin>&errorCode=notApprovedDomain

with the user-visible error: “Unable to Sign In — Sorry, unable to access app. Please reach out to your admin to configure approved domains to be able to use this app.”

What we’ve already done

  • Iframe src includes ?originDomain=https://<our-app-origin> exactly as the docs prescribe
  • All 21 OAuth scopes granted (user:read:user + meeting / webinar / phone groups)
  • Per-user OAuth completed successfully (we can call /phone/users/me/* REST endpoints fine)
  • Account admin → Account Settings → Zoom Phone tab → “Automatically Call From 3rd Party Apps” toggle is ON (the prereq from the official Smart Embed guide)
  • Searched the Account Settings tabs (Meetings, Phone, Zoom Apps, Mail & Calendar) for any “Approved Domains” / “Embedded App” / “Allowed Origin” field — none found in our plan’s admin UI
  • Marketplace app’s Phone SDK toggle is now OFF (per reviewer feedback that we don’t actually use the SDK, just the Smart Embed)

What I think we need but can’t find

A way to register our parent origin as an approved domain for our Marketplace app’s Smart Embed iframe while the app is still in Development mode. The official guide says “inform the admin to add this domain to the approved domain list” but doesn’t show where that list lives in the admin UI.

Questions

  1. For a User-managed Marketplace app in Development mode, where exactly does the Smart Embed parent-origin allowlist live? Marketplace app config (which tab/field) or Account admin (which path)?
  2. Is the allowlist only populated at app publication / Marketplace review time? If so, can we get our origin provisionally allowlisted for our existing review submission so the reviewer can complete the Phone test?
  3. Is there a “Local Test” allowlist for development-mode apps that I’m missing?

App context (full details available privately)

  • App type: User-managed
  • Status: Development (currently withdrawn from review while we address reviewer feedback)
  • Happy to share our app name, app ID, and full parent origin via DM or support email — would rather not post on the public forum.

Thanks!