AuthKit Domain
Guidance on configuring a custom domain for AuthKit.
The domain for AuthKit will consist of a randomly generated phrase plus the domain authkit.app, for instance youthful-ginger-43.authkit.app.
This is the default in the staging environment, in Production environments a custom domain can be configured via the dashboard.
You must configure an Authentication API domain first in order for your custom AuthKit domain to work properly.
With the production environment selected, navigate to the Domains section of the WorkOS Dashboard.
Click the Configure AuthKit domain button and enter the domain you would like to use.
You will be prompted to add a CNAME record to your DNS provider. If your DNS provider is Cloudflare, ensure the CNAME record is configured as DNS-only and is not proxied. To manage custom domains, WorkOS uses Cloudflare, who prohibit domains from being proxied across accounts.
It can take some time for DNS changes to take effect. If the initial verification attempt is not successful, WorkOS will continue trying to verify your domain for 72 hours.
Once your domain is successfully verified, users signing in via AuthKit will be redirected to your custom domain.