Adding a Domain
Important:
The domain(s) that are added and verified determine which users can authenticate through your identity provider. The authenticating user’s email address is compared to the domains the identity provider has verified. The domain matching is case insensitive.
• | If the user's email address matches a domain that has been verified for the identity provider, authentication succeeds. |
• | If the user's email address does not match any verified domain for the identity provider, authentication fails. |
These examples illustrate which domains should be added to support authenticating different sets of users.
Email Addresses of users that need to authenticate |
Domain(s) that must be verified |
john@acme.com jane@acme.com |
acme.com |
sally@globex.com sue@globex.com joe@globex-test.com |
globex.com globex-test.com |
Perform the following steps to add your organization’s domain in your identity provider record.
To add a domain:
1. | Go to the Identity Providers page (Administration > Identity Providers). |
2. | Click the identity provider record. |
3. | In the identity provider record, click the Domains tab. |
4. | Click the Add a Domain button. |
5. | Enter your organization’s domain in the Domain field. |
Important:Once you have added a domain, copy the verification code and add it to your DNS as a TXT record. TXT record changes can take up to 24-48 hours to go into effect, but usually happens much sooner.
6. | Click Save. |
Note:You can add multiple domains under the Domains tab.
7. | Continue with the steps in Verifying a Domain With a TXT Record. |