Cloud · Organizations · 03
Verify a domain
Prove your company owns an email domain, and what verifying it changes.
A verified domain, such as acme.com, tells Zym Labs your company owns it. Colleagues who sign up with an address on it join your organization automatically, as members, and it's what single sign-on signs people in for. You verify a domain by adding a DNS record. You need to be an organization owner or admin.
Verify it
Add the domain
Open Domains and choose Add domain. Enter the part after @ in your colleagues' email addresses and choose Add domain. Public email providers such as Gmail can't be added.
Add the TXT record
Cloud shows a record to add. Sign in to wherever the domain's DNS is managed, such as your registrar, Cloudflare or Route 53, and add a TXT record:
- Name:
_zymlabs-verify.followed by your domain, such as_zymlabs-verify.acme.com - Value:
zymlabs-verify=followed by a token that's unique to your organization and domain. Copy it from Cloud.
It can take up to an hour for a new record to be visible.
Let Cloud check
Cloud checks every minute for the first 10 minutes, then every 5 minutes for the first hour, then every 30 minutes for up to 7 days. Choose Check now to check straight away. When it finds the record, the domain shows Verified.
Add the people already on it
Once a domain is verified, Cloud lists the people who already have Zym Labs accounts on it and aren't in an organization. Choose who to add as members, or Not now. The offer lasts 7 days.
People with addresses on the domain who are in another organization stay there. An owner can move them with Claim, which signs them out and adds them as members; people managed by another organization's single sign-on are never moved.
Keep it verified
Cloud checks every verified domain once a day. If the record is missing, the domain shows Check failing and Cloud tells you the date to put it back by. After 7 days without it, the domain stops being verified, and any single sign-on connection for it stops working. Leave the record in place for as long as you use the domain.
Remove a domain
Choose Remove domain. People with addresses on it stay in your organization, but new colleagues no longer join automatically, and another organization could verify it. You can't remove a domain while a single sign-on connection signs people in for it, and removing a verified domain asks you to confirm it's you.
Troubleshooting
Cloud says it hasn't found the record
Wait up to an hour after adding it. Check that the name is _zymlabs-verify. plus your domain: some DNS providers add the domain for you, which doubles it. Check that the value matches Cloud's exactly, then choose Check now.
Another organization verified it first
A domain belongs to one organization: the first to prove it. If you think that's a mistake, contact support.
Cloud stopped checking
Cloud stops after 7 days without finding the record. Add the record, then choose Check again.
What's next
- How single sign-on works: what a verified domain makes possible.
- Invite and manage members: invite people on other domains.