# Domain Verification

# Introduction

Domain Verification allows your customers to claim ownership of a domain. Once they have claimed ownership, features that require a higher level of trust and security can be activated.

WorkOS Domain Verification provides a self-serve flow through the Admin Portal in which IT contacts can prove ownership through the creation of DNS TXT records.

## Before getting started

You’ll need a [WorkOS account](https://dashboard.workos.com/).

### API object definitions

[Organization](https://workos.com/docs/reference/organization)
: Describes an organization whose users sign in with a SSO Connection, or whose users are synced with a Directory Sync Connection.

[Organization Domain](https://workos.com/docs/reference/domain-verification)
: Describes a domain associated to an organization, verified or unverified.

[Portal Link](https://workos.com/docs/reference/admin-portal/portal-link)
: A temporary link to initiate an Admin Portal session. Valid for 5 minutes.

All domains belong to an [Organization](https://workos.com/docs/reference/organization). In order to create and verify a domain through the Admin Portal, an Organization must first be [created](https://workos.com/docs/reference/organization/create).

## (A) Setup link from the WorkOS dashboard

- Sign in to your [WorksOS dashboard](https://dashboard.workos.com/) account and create or locate an Organization.
- Click the “Invite Admin” button, select **Domain Verification** then click “Next." Enter the emails of the IT contacts for the organization to automatically send them a setup link, or click "Copy setup link".

If you chose to copy the setup link you can share it over email, Slack or direct message. We also recommend including details on what the link does and how long the link is active.

![A screenshot showing the workOS dashboard admin invite.](https://images.workoscdn.com/images/c9196bbf-3860-4a9a-be8c-83b503ae4e3d.png?auto=format\&fit=clip\&q=80)

## (B) Integrate with your app

Admin Portal links can also be programmatically generated for the domain verification flow. This can be used to provide a link to the Admin Portal flow directly in your application.

You’ll have to generate the link with the `domain_verification` intent:

#### Create Admin Portal Link for Domain Verification

```js
import { WorkOS } from '@workos-inc/node';

const workos = new WorkOS('sk_example_123456789');

const { link } = await workos.portal.generateLink({
  organization: 'org_01EHZNVPK3SFK441A1RGBFSHRT',
  intent: 'domain_verification',
});

// Redirect to link
```

Please refer to the [Admin Portal Integration Guide](https://workos.com/docs/admin-portal/b-integrate-with-your-app) for additional integration details.

***

## Admin Portal domain verification

After receiving the invitation and clicking on the setup link, the organization's IT contacts are prompted to enter the domain they wish to verify.

![A screenshot show the Admin portal domain entry form.](https://images.workoscdn.com/images/e7e719d6-579b-4567-8c80-772bc2f77563.png?auto=format\&fit=clip\&q=80)

If the domain is valid, we identify the DNS service provider and offer custom setup instructions.

The admin will find instruction to add a DNS TXT record with a token generated by our system.

![A screenshot showing the Admin Portal domain DNS instructions.](https://images.workoscdn.com/images/9ab7e2a4-8b11-4a03-8203-d95d1c1abb07.png?auto=format\&fit=clip\&q=80)

When we detect and verify the DNS record, we will mark the domain as `verified` and dispatch a [domain verification event](https://workos.com/docs/events) to inform your application.