> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firstresonance.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage domains

> Claim and verify your company's email domain so ION can route users to your organization at login.

Claiming a domain (for example, `acme.com`) tells ION that email addresses on that domain belong to your organization. Once a domain is verified, it acts as an allowlist: users whose email matches a verified domain are automatically associated with your organization at sign-up. Claiming a domain is also required before you can set up enterprise SSO or automatic user provisioning.

## Add a domain

1. In ION, go to **Settings > Organization > Authentication**.
2. In the **Domain Management** card, enter your domain in the **Add Domain** field and click **Add Domain**.

The domain appears in your **Claimed Domains** list with a **Pending** status.

## Verify the domain

ION requires you to prove you own the domain by publishing a DNS TXT record. After you add a domain, ION displays the TXT record name and value to publish.

1. Give the TXT record name and value to whoever manages your DNS, and have them add it to the domain's DNS settings.
2. Once the record is live, click **Check Verification** next to the domain.

ION checks for the record and updates the domain's status. DNS changes can take a few minutes to propagate. If verification is still **Pending**, wait and try again.

## Domain statuses

| Status       | Meaning                                                                                                    |
| ------------ | ---------------------------------------------------------------------------------------------------------- |
| **Verified** | Ownership confirmed. ION routes users on this domain to your organization.                                 |
| **Pending**  | Waiting on the DNS record, or DNS hasn't propagated yet.                                                   |
| **Failed**   | ION couldn't find the expected TXT record. Double-check the record and click **Check Verification** again. |

## Remove a domain

1. In the **Domain Management** card, click the remove icon next to the domain.
2. In the **Remove domain** dialog, click **Remove domain** to confirm.

<Warning>
  Removing a domain means users with email addresses on that domain are no longer automatically associated with your organization at login. Only remove a domain you no longer use.
</Warning>

## Related

* [Set up SSO](/administration/authentication-settings/set-up-sso)