Verify a domain for SSO

Claim and verify a domain

In the Developer Console, Tenant → Domains holds the Account's verified email domains. A verified domain can be attached to any SSO connection, so people whose email ends in it are routed to their identity provider. Domains are a Pro feature; on a Free account the page says so and offers no Add domain.

Application: Developer Console
Path: TenantDomains
Opens with: sso.view Read SSO connections, verified domains, the custom auth domain, and directory sync.
Context: Account-wide. No Application or Environment selection applies.

Claim and verify a domain

Open Domains from the left nav under Tenant and click Add domain.

Enter the domain, such as acme.com. A full URL is trimmed to its host; a value with a scheme or a path is refused inline with Enter a domain like acme.com, without https:// or a path.

Submit. The domain is claimed immediately and listed as Pending with a DNS record name, a DNS record value, and a Verify action.

Publish the TXT record exactly as shown at your DNS provider and wait for it to propagate. Then click Verify. A Domain verified. toast appears and the status becomes Verified. Clicking Verify before the record resolves fails with Couldn't verify. Check the DNS TXT record and try again. and leaves the domain Pending.

Click Remove on a row to drop the domain. A Domain removed. toast confirms it.

If you don't see this

Each control on the Domains page exists only for someone who may use it. When something described above is missing, one of these is why:

Domains is not in the left nav. Your administrator role does not carry sso.view.

The page opens but there is no Add domain, Verify, or Remove. You hold sso.view but not sso.manage.

The page says Domains are a Pro feature. The Account is on the Free plan; upgrade from the Admin Workspace's Billing page.

Set up an SSO connection →

Environment

API version

v1.0

On this page

Was this page helpful?

Tell us how we can improve this guide.