Articles on: Security & SSO

Verify your Domain

Verifying your domain


Before you can set up Single Sign-On (SSO) or automatic user provisioning for your organisation,

you need to verify the domain your team's email addresses use — for example acme.com.


Verifying a domain proves to Smart Core Connect that you own it. Once it's verified, Smart Core

Connect can safely route everyone with an @acme.com address to your own identity provider when

they sign in.


You'll need administrator permissions for your organisation to do this.



Before you start


  • Decide which domain(s) your users sign in with (usually your primary email domain).
  • Make sure you can edit your domain's DNS records, or can ask whoever manages your DNS to add

one for you. (This is the same place you'd manage records for your website or email.)



Step 1 — Open the Authentication settings


  1. Open Settings.
  2. Go to your Organisation.
  3. Select the Authentication tab.


The first time you visit, you'll see a short guided setup that walks you through verifying a

domain, adding IT contacts, and configuring SSO. Verifying a domain is the first step.



Step 2 — Add your domain


  1. In the Domains section, click Add domain.
  2. A new browser tab opens the WorkOS Admin Portal — the secure tool we use to manage identity

and domain verification.

  1. Enter the domain you want to verify (for example acme.com) and follow the on-screen steps.


Tip: The link to the portal is valid for a few minutes only. If it expires before you finish,

just return to the Authentication page and click Add domain again.



Step 3 — Add the DNS record


The portal will give you a DNS record to add to your domain (usually a TXT record). This is

how ownership is confirmed.


  1. Copy the record exactly as shown.
  2. Add it in your DNS provider's control panel (for example GoDaddy, Cloudflare, or wherever your

domain is managed).

  1. Save the change.


DNS changes can take anywhere from a few minutes to a few hours to take effect, depending on your

provider.



Step 4 — Check the status


Return to the Authentication tab in Smart Core Connect. The domain status refreshes

automatically when you come back to the page. Each domain shows one of three statuses:


Status

What it means

🟡 Pending

The domain has been added but ownership isn't confirmed yet — usually waiting for your DNS record to take effect.

🟢 Verified

Ownership is confirmed. You can now set up SSO and user provisioning.

🔴 Failed

The DNS record couldn't be found or didn't match. Check the record and try again.



Troubleshooting


It's still showing "Pending".

Your DNS record probably hasn't taken effect yet. Give it a little more time, then re-open the page.

Double-check the record matches exactly — a stray space or a wrong record type is the most common

cause.


It shows "Failed".

The record couldn't be found. Re-open the portal, copy the record again, and confirm it's saved

correctly with your DNS provider. Then return to Smart Core Connect to re-check.


I don't see the Authentication tab, or there's no option to add a domain.

Domain verification is only available to organisation administrators, and only when SSO or automatic

provisioning is part of your plan. If you think this is wrong, contact your Smart Core Connect

account manager or support.



What's next?


Once your domain shows Verified, you're ready to:


  1. Add your IT contacts — see Managing IT contacts.
  2. Set up Single Sign-On — see Setting up Single Sign-On (SSO).


Updated on: 15/06/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!