diff --git a/backend/src/Tnsu.ApprovalRoute.Api/Program.cs b/backend/src/Tnsu.ApprovalRoute.Api/Program.cs
index 538fce2..cc44f22 100644
--- a/backend/src/Tnsu.ApprovalRoute.Api/Program.cs
+++ b/backend/src/Tnsu.ApprovalRoute.Api/Program.cs
@@ -11,8 +11,18 @@ using Tnsu.ApprovalRoute.Application;
 using Tnsu.ApprovalRoute.Application.Common.Interfaces;
 using Tnsu.ApprovalRoute.Infrastructure;
 
+const string CorsPolicyName = "Frontend";
+
 var builder = WebApplication.CreateBuilder(args);
 
+var corsAllowedOrigins = builder.Configuration.GetSection("Cors:AllowedOrigins").Get<string[]>() ?? [];
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy(CorsPolicyName, policy => policy
+        .WithOrigins(corsAllowedOrigins)
+        .AllowAnyHeader()
+        .AllowAnyMethod());
+});
 builder.Services.AddApprovalRouteInfrastructure(builder.Configuration);
 builder.Services.AddApprovalRouteApplication();
 builder.Services.AddApprovalRouteAuth(builder.Configuration);
@@ -63,6 +73,8 @@ app.MapScalarApiReference(options =>
 
 app.MapHealthChecks("/health");
 
+app.UseCors(CorsPolicyName);
+
 app.UseAuthentication();
 app.UseAuthorization();
 
diff --git a/backend/src/Tnsu.ApprovalRoute.Api/appsettings.json b/backend/src/Tnsu.ApprovalRoute.Api/appsettings.json
index fc9ebc8..12fe82b 100644
--- a/backend/src/Tnsu.ApprovalRoute.Api/appsettings.json
+++ b/backend/src/Tnsu.ApprovalRoute.Api/appsettings.json
@@ -15,6 +15,12 @@
   "Dev": {
     "DefaultUserEmail": "dev@tnsu.kz"
   },
+  "Cors": {
+    "AllowedOrigins": [
+      "https://tnsukz.sharepoint.com",
+      "https://localhost:4321"
+    ]
+  },
   "TnsuPortal": {
     "BaseUrl": "https://api.tnsu.kz",
     "TenantId": "b4c2af35-bfd6-4cff-9af9-556efb53e65a",