Skip to main content
Domain verification establishes that an organization controls a domain used for an identity configuration. It is separate from verifying one person’s email address or inviting that person into a workspace.
Threetone has no released self-service domain-claim, DNS-challenge, or verification-status management workflow. The SSO sign-in entry uses organization-domain lookup, but that lookup is not a domain-verification process or proof of exclusive domain ownership.

​
Prepare the domain review

You need the workspace owner, the domain’s DNS administrator, and the person managing your identity provider.
1

Inventory the domains

Record primary email domains, subdomains, aliases, and any domains shared by separate organizations. Identify who can authorize changes to each one.
2

Define routing and membership expectations

Decide which workspace an employee should reach and how external collaborators should sign in. Domain matching must not be assumed to grant membership or resource access.
3

Obtain supported setup instructions

Contact the Help Center with the workspace and domain requirements. Use only challenge values and DNS records supplied through an approved setup process. No generic TXT value is documented here.
Continue with the SSO readiness guide to plan provider configuration, recovery access, and provisioning separately. Do not remove an existing sign-in route until the intended users and administrators can use its replacement.
No. Email verification identifies control of a mailbox; domain administration is a separate responsibility.
No such automatic membership guarantee is established by the SSO domain lookup.