Domain Verification
Verify organization domains for secure authentication and provisioning.
Domain verification allows IT contacts to prove they control specific domains. This allows WorkOS to trust actions from users with the verified domain and enables authentication and membership policy enforcement for those users.
Verifying an organization domain enables the following features:
- Users with the verified domain who sign in with the organization’s SSO connection don’t need to verify their email.
- By default, users with the verified domain are managed by the organization’s domain policy, allowing for enhanced control over authentication and membership.
A verified domain matches the domain part of a user’s email address (the part after @) exactly. Matching is case-insensitive.
Verifying example.com does not cover engineering.example.com or any other subdomain. Add and verify each domain or subdomain used in your users’ email addresses separately.
Enter the email domain, not the website host or identity provider (IdP) hostname. For users with @example.com email addresses, enter example.com, even if their website is www.example.com or their IdP sign-in URL uses example.okta.com.
The following examples assume the entered domain has been verified:
| Entered domain | Email addresses that match | Email addresses that don’t match |
|---|---|---|
example.com |
user@example.com |
user@engineering.example.com, user@www.example.com |
engineering.example.com |
user@engineering.example.com |
user@example.com, user@team.engineering.example.com |
www.example.com |
user@www.example.com |
user@example.com |
Domain verification can be delegated to the Admin Portal domain verification flow. This out-of-the-box UI guides IT contacts to add a DNS TXT record to prove domain ownership. Once the DNS TXT record is correctly added, the organization domain is automatically verified.
Verified domains may also be added manually via the WorkOS Dashboard or API. This shortcut is useful if the IT contact has already proven domain ownership in another context.
gmail.com.
