Overview
We request that companies Verify or Allow list their email domains as a prerequisite for enabling their System Admins to better govern their Workplaces. Your System Admin will be able to access increased user management capabilities and a broader spectrum of technical features.
Domain Verification vs. Domain Allow listing
We regard the verification of a domain as proof that you own that specific domain and therefore must have access to all the information and features necessary to manage all the users with that email domain.
Allow listing is considered as evidence that you have the legitimacy to use a specific domain. Since allow listing is not a proof of ownership (like verification is), there will be limitations regarding the amount of access and control your admins can have over all the users with that allow listed email domain.
Allow listing your domain allows other people with the same email domain to create separate Workplace accounts. If you choose to allow list your domain rather than verifying it you will not be able to:
- Block others with the same email domain from creating separate Workplaces
- Enable Single Sign-On
- Edit personally identifiable information for the users with that domain
- Send users notifications prior to their profiles being activated for the users with that domain
If you allow list your domain you can still choose to verify it at any time.
Check domain status
You can check which domains have been verified or allow listed in your instance by logging in as an Administrator who has the System Administrator role. Once you're logged in as an Administrator with this permission, you can complete the following steps to visualize verified and unverified domains.
- In the Incomplete verification and allow listing section,
indicates a domain has yet to be verified or allow listed. Either verification has not been attempted or it has failed - In the Allow listed and verified domains section,
indicates an allow listed domain, 
indicates a verified domain.
Domain Verification
Verifying proves that you own a domain and the people from your domain won't be able to create other separate Workplaces and won't see suggestions to join other Workplaces when they first sign up.
Once your domain is verified, your System Admins will have increased user management abilities over the profiles using that domain. They will now gain the following administrative and technical capabilities:
- Full access to personally identifiable information
- Capacity to edit the personally identifiable information
- Unrestricted automatic provisioning via an Identity Provider or SCIM API integration
- Configuring Single Sign-On authentication
- Generating claim links
Add a domain
To add your organisation’s domain name(s) with Workplace:
You can verify a domain by using one of the verification methods listed below:
Verify by using an Administrative email
You can verify your domain using an administrative account. Select an administrative email address to receive a confirmation email. To do this, you must have access to administrative email accounts (such as admin@) on your domain.
To verify at a later time (for example, after adding other domains), select the Email domains tab, click Verify next to the domain you want to verify, then click Send email.
admin@, administrator@, postmaster@, webmaster@, hostmaster@.Verify by using a DNS TXT record
You can verify your domain using a DNS TXT record by logging in as an Administrator who has the System Administrator role. Once you're logged in as an Administrator with this permission, you can complete the following steps to verify a domain:
To verify at a later time (for example, after adding other domains), select the Email domains tab, click Verify next to the domain you want to verify, then click Update DNS Record.
Verify by using HTML file upload
You can verify your domain using an HTML file by logging in as an Administrator who has the System Administrator role. Once you're logged in as an Administrator with this permission, you can complete the following steps to verify a domain:
To verify at a later time (for example, after adding other domains), select the Email domains tab, click Verify next to the domain you want to verify, then click Upload HTML File.
Domain Allow listing
Allow listing is a domain attachment concept for companies that cannot verify a specific domain but would still like to use it. While allow listing does not offer the full range of technical and administrative capabilities that verifying a domain offers, performing this action will allow System Admins to:
- Partially access personally identifiable information for the users with that domain.
- Automatically provision up to 2000 users per hour and 8000 users per day via an Identity Provider or SCIM API integration.
Allow list an email domain to your Workplace instance
To allow list an email domain to a Workplace, you'll need to be logged in as a System Administrator.
