> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/identity-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/identity-support/user-guide/organization-admin-app/business-owner-default-authority/organization-management/domain-ownership-verification-dns.md).

# Domain ownership verification (DNS)

### **Scope** <a href="#scope" id="scope"></a>

This document defines how a new user verifies their domain ownership during the creation of a Business Account. Applies to: • Business Accounts Not applicable to: • Personal Accounts

***

### **I am new. Where should I start?** <a href="#i-am-new.-where-should-i-start" id="i-am-new.-where-should-i-start"></a>

If you are registering a Business Account for the first time: • Domain verification is required to complete your domain setup. • Your Business Account will only become active if the domain is successfully verified. • Once verified, the domain is mapped to the new Organization, and the default Workspace is created.

***

#### **Purpose** <a href="#purpose" id="purpose"></a>

This guide helps users understand: • What domain verification is and why it is required. • The available methods to verify a domain. • How domain verification works step by step. • What happens after the domain is verified.

***

#### **Prerequisites** <a href="#prerequisites" id="prerequisites"></a>

Before verifying a domain: • You must be in the Business Account registration flow. • You must have provided a valid domain name that is not a blacklisted personal email provider (e.g., Gmail, Yahoo).

***

#### **Domain Verification Overview** <a href="#domain-verification-overview" id="domain-verification-overview"></a>

Domain verification proves that you control the domain you are trying to register. It ensures a clear separation from Personal Accounts and prevents multiple organizations from claiming the same domain without proper ownership. Available methods: • DNS Verification (Recommended for faster processing). • Email Verification (Using a role-based email address).

***

### **I already understand. How do I proceed step by step?** <a href="#i-already-understand.-how-do-i-proceed-step-by-step" id="i-already-understand.-how-do-i-proceed-step-by-step"></a>

1. **Domain Verification Entry Point** Users can verify their domain from: • The Business Account sign-up flow, immediately after entering Domain and Organization Information. • The Domain Management page, if returning to the app to check the verification status.
2. **Domain DNS** **Verification Flow**

Step 1: Start DNS Verification

1. The system displays a unique auto-generated TXT Record value (e.g., `v=domain-verify-xxxXX`).
2. Click the Copy button next to it.

Step 2: Update DNS Settings Add the TXT record to your domain's DNS provider panel with the following details:

* **Record Type:** TXT
* **Name/Host:** @ (or leave blank for the root domain)
* **TTL:** 300 (or default)
* **DNS Provider (Optional):** A dropdown allows the user to select their provider (e.g., AWS Route53, Cloudflare, Google Domains, Namecheap). A tooltip clarifies: *Selecting your provider helps show relevant instructions.*

Step 3: Confirm and Verify

1. Return to the setup screen and click "Verify Now".
2. The system will check your DNS record.

#### **After Verification** <a href="#after-verification" id="after-verification"></a>

After successful verification (with no conflicts): • The domain status is updated to Verified. • The Business Account is converted to Active. • The verified domain is mapped to the new Organization and creates the default Workspace. • You are redirected to the Business Dashboard.

#### **Security Considerations** <a href="#security-considerations" id="security-considerations"></a>

• **Conflicts:** If the domain is already linked to another organization, you must verify ownership to continue or follow the Reclaim Ownership Flow.

• **Email Restrictions:** Personal email providers (e.g., Gmail, Outlook) are strictly not allowed for email verification.

#### **Important Notes** <a href="#important-notes" id="important-notes"></a>

* If DNS verification fails, you can check your record and use the "Check Again" or "Retry" action.
* If your domain is marked as Suspended, you must contact Platform Admin or Support.

#### **Summary** <a href="#summary" id="summary"></a>

| **Item**               | **Description**                                            |
| ---------------------- | ---------------------------------------------------------- |
| **Who verifies**       | <p>New Business Account users</p><p> </p>                  |
| **Recommended Method** | <p>DNS Verification (TXT record)</p><p> </p>               |
| **Alternative Method** | <p>Email Verification (Role-based emails only)</p><p> </p> |
| **Email Validity**     | <p>Link expires in 24 hours</p><p> </p>                    |
| **Result**             | Account becomes Active, Org and Workspace created          |