Domain Verification
Verify organization domains for secure authentication and provisioning.
Domain verification allows IT admins to prove they control specific domains. This allows WorkOS to trust actions from users with the verified domain and enables authentication and membership policy enforcement for those users.
Verifying an organization domain enables the following features:
- Users with the verified domain who sign in with the organization’s SSO connection don’t need to verify their email.
- By default, users with the verified domain are managed by the organization’s domain policy, allowing for enhanced control over authentication and membership.
Domain verification can be delegated to the Admin Portal domain verification flow. This out-of-the-box UI guides the IT admin to add a DNS TXT record to prove domain ownership. Once the DNS TXT record is correctly added, the organization domain is automatically verified.
Verified domains may also be added manually via the WorkOS Dashboard or API. This shortcut is useful if the IT admin has already proven domain ownership in another context.
Only add domains the organization owns. Manually verifying domains not owned by the customer can create security risks including unauthorized access.