Verified Domains
A Verified Domain is an email domain, such as example.com, that your Tenant proved it owns. Only users whose email is in one of your Verified Domains can sign in through your Tenant’s SSO. You verify a domain on the Sign-in page of the Admin App, with the Right to manage sign-in. Admins hold it.
Other Tenants may verify the same domain too, each with its own record. That never gives them access to your Tenant.
Add a domain
Section titled “Add a domain”- In the Admin App, select Sign-in.
- Under Verified Domains, enter the domain, such as
example.com, and select Add domain.
Enter the domain alone, without https:// and without an email address. Each subdomain, such as eu.example.com, is a domain of its own.
The domain appears in the list with a TXT record that is your Tenant’s own:
| Field | Example |
|---|---|
| Type | TXT |
| Name | _strategy-agent-verification.example.com |
| Value | strategy-agent-verification=0f3Kq9vWb8xZ2mN5rT7yU1aC4dE6gH8j |
Publish the record
Section titled “Publish the record”Ask whoever manages your domain’s DNS to add the record at your DNS provider. Copy the name and the value with the buttons next to them. Some DNS providers add the domain to the name themselves: then enter only _strategy-agent-verification.
Other TXT records under the same name, such as another Tenant’s, don’t get in the way.
Check the domain
Section titled “Check the domain”Select Check now. The domain is verified once the record holds your value exactly.
If the check says Record not found, the record isn’t visible yet. DNS changes can take a while to spread, sometimes up to a few hours: check again later. If the check says the DNS didn’t answer, nothing changed; try again in a moment.
The domain is checked only when you select Check now. Once verified, it stays verified, and you may remove the record from your DNS.
Remove a domain
Section titled “Remove a domain”Select the cross next to the domain and confirm. The domain no longer counts as verified for your Tenant. To verify it again, add it again and publish the new record it gets.
What the Audit Log shows
Section titled “What the Audit Log shows”Adding, verifying and removing a domain each leave an entry in the Audit Log with the domain, who did it and when. A check that didn’t find the record leaves none.