Add and verify a domain

Add the registered domain that your company owns and that you use for employees' email addresses.

Begin setting up Single Sign-On (SSO):

• Azure
• Okta
• OneLogin

You need to add and verify at least one domain to prevent unauthorized SSO authentication and domain spoofing, and to ensure a secure authentication flow.

1. Open Product Settings > SSO.
2. Click the Domains tab.
3. In the Add new domain field, type the domain value, select the Type (CNAME or TXT), and click Add Domain.

   For example, if a potential SSO user's email is [e-mail], you'd type example.com as the domain.

   The new entry is added to the domains list as an Unverified domain.

4. Click the down-arrow to the left of the domain entry to display the DNS Record.
   
5. Keep the browser tab that has the Alida Domains page open. Open a new browser tab to access your DNS site.
6. Add the values from the Domains page to your DNS configuration.

   For both CNAME and TXT DNS records, the three required values are listed separated by spaces:

   • Add the first value as the owner or source name.
   • Add the second value as the DNS record type. It will either be CNAME or TXT.
   • Add the third value as the target or destination name.

   Example

   This example shows the two supported DNS record formats configured in AWS Route 53. The first is a TXT record, and the second is a CNAME record.

   • The first value in the DNS record is added as the Record Name field.
   • The second value in the DNS record is added as the Type field.
   • The third value in the DNS record is added as the Value/Route traffic to field.

   

7. On the Alida Domains page, select Verify from the domain's action menu.

   The domain's status changes to Verified.

8. Click Apply.
   The domain status changes from Verified to Active.

   

Related information

• Quick start: SSO setup
• Configure SSO-only mode