How do custom domains and CSP Trusted Sites work for Experience Cloud?

Custom domains give Experience Cloud sites a branded URL (e.g., support.company.com) instead of the default Salesforce subdomain. Configuration:

1. In Setup, configure the Custom Domain for the org (My Domain), then add the community path.
2. Create a CNAME DNS record pointing the custom domain to the Salesforce community URL.
3. SSL Certificates — Salesforce can provide a free SSL certificate via Let's Encrypt or you can upload a custom certificate for the domain.
4. After DNS propagation, activate the domain in the Digital Experiences settings. CSP Trusted Sites — Content Security Policy rules must be configured for any external URLs (fonts, scripts, images, analytics) that components on the community pages load; without CSP entries, browsers block these external resources as a security measure.