1. Docs
  2. Single Sign-On
  3. Verify a Domain

Verify a Domain for SSO

Claim a domain in the Developer Console, publish its DNS TXT record, verify it for use across SSO connections, and remove it.

Claim and verify a domain

In the Developer Console, Tenant → Domains holds the Account's verified email domains for admin SSO: people whose email ends in a verified domain are routed to the Account's admin connection. An organization's end-user SSO domains are claimed on the organization instead, in the Domains section of its Policy tab, with the same claim, TXT record, and verify steps; the record name there is _sso-verification.<domain>. Domains are a Pro feature; on a Free account the page says so and offers no Add domain.

Application
Developer Console
Path
TenantDomains
Opens with
  • sso.view Read SSO connections, verified domains, the custom auth domain, and directory sync.
Context
Account-wide. No Application or Environment selection applies.
Claim and verify a domain
Open Domains from the left nav under Tenant and click Add domain.Enter the domain, such as acme.com. A pasted URL is trimmed to its host, so https://acme.com/login becomes acme.com; what remains must be a domain name, or the dialog refuses it inline with Enter a domain like acme.com, without https:// or a path. A public email provider's domain such as gmail.com is refused too, since nobody can prove ownership of it.Submit. The domain is claimed immediately and listed as Pending with a DNS record name (_canopy-verification.<domain>), a DNS record value, and a Verify action.Publish the TXT record exactly as shown at your DNS provider and wait for it to propagate. Then click Verify. A Domain verified. toast appears and the status becomes Verified. Clicking Verify before the record resolves fails with Couldn't verify. Check the DNS TXT record and try again. and marks the domain Failed; Verify stays available, so publish the record and click it again. A domain another Account has already verified cannot be verified here.Click Remove on a row to drop the domain. A Domain removed. toast confirms it.
If you don't see this

Each control on the Domains page exists only for someone who may use it. When something described above is missing, one of these is why:

Domains is not in the left nav. Your administrator role does not carry sso.view.The page opens but there is no Add domain, Verify, or Remove. You hold sso.view but not sso.manage.The page says Domains are a Pro feature. The Account is on the Free plan; upgrade from the Admin Workspace's Billing page.
Set up an SSO connection →
Environment
API version
v1.0
 On this page Was this page helpful?

Tell us how we can improve this guide.

Canopy