Claiming a domain (for example, acme.com) tells ION that email addresses on that domain belong to your organization. Once a domain is verified, it acts as an allowlist: users whose email matches a verified domain are automatically associated with your organization at sign-up. Claiming a domain is also required before you can set up enterprise SSO or automatic user provisioning.
Add a domain
- In ION, go to Settings > Organization > Authentication.
- In the Domain Management card, enter your domain in the Add Domain field and click Add Domain.
The domain appears in your Claimed Domains list with a Pending status.
Verify the domain
ION requires you to prove you own the domain by publishing a DNS TXT record. After you add a domain, ION displays the TXT record name and value to publish.
- Give the TXT record name and value to whoever manages your DNS, and have them add it to the domain’s DNS settings.
- Once the record is live, click Check Verification next to the domain.
ION checks for the record and updates the domain’s status. DNS changes can take a few minutes to propagate. If verification is still Pending, wait and try again.
Domain statuses
| Status | Meaning |
|---|
| Verified | Ownership confirmed. ION routes users on this domain to your organization. |
| Pending | Waiting on the DNS record, or DNS hasn’t propagated yet. |
| Failed | ION couldn’t find the expected TXT record. Double-check the record and click Check Verification again. |
Remove a domain
- In the Domain Management card, click the remove icon next to the domain.
- In the Remove domain dialog, click Remove domain to confirm.
Removing a domain means users with email addresses on that domain are no longer automatically associated with your organization at login. Only remove a domain you no longer use.