Verified domains

A verified domain is an email domain the organization has proven it controls. Infrality believes the organization’s identity provider and directory only about addresses on its verified domains.

Verify one

1. In the organization’s Security section, add the domain — example.com.

2. Publish the TXT record you are given:

   _infrality-challenge.example.com.  TXT  "infrality-domain-verification=<challenge>"

3. Press Verify. Each press is a DNS lookup, so it is limited to ten a minute; DNS changes can take a while to propagate.

Rules

• Exact match only. example.com vouches for nothing at eu.example.com; add each domain you use.
• One organization holds it. Several can claim a domain; only one can have it verified.
• Public mail providers cannot be claimed.
• It is rechecked daily. If the record has been missing for a week, the domain lapses. A lookup that failed — a DNS outage — never lapses it.
• International domains are stored in their punycode form.

Keep the TXT record published for as long as you use the domain.

What depends on it

• Single sign-on: a connection can be enabled only with a verified domain, and only addresses on verified domains are accepted from it.
• SCIM: only people on verified domains can be provisioned.
• The Require single sign-on policy: who is asked is decided by domain.