> For the complete documentation index, see [llms.txt](https://docs.sonarsource.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/verify-domain.md).

# Domain verification

Domain verification serves as a foundational security step that proves your organization owns a specific email domain.

When configuring Single Sign-On (SSO) in your enterprise, domain verification provides various advantages, such as avoiding one-time email verification during SSO login.

Administrators of a SonarQube Cloud enterprise can verify their company's email domain using the setup assistant. This process associates the verified domain with your SSO connection.

## Step 1: Start the Domain Configuration assistant

1. In SonarQube Cloud, retrieve your enterprise. See [Retrieving and viewing your enterprise](/sonarqube-cloud/administering-sonarcloud/managing-enterprise/retrieving-and-viewing-your-enterprise.md) for more details.
2. Go to **Administration** > **SSO & Provisioning**. The **SSO & Provisioning** page opens. The **Single sign-on & Domain verification** section header shows your domain's verification status.

<figure><img src="https://2223713658-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FB4UT2GNiZKjtxFtcFAL7%2Fuploads%2Fgit-blob-c04ae75e8f0a5d779781d70ceed29da6b4315412%2Fsonarqube-cloud-sso-domain-not-verified_Cs0257.png?alt=media" alt="The domain verification status is shown in the section header."><figcaption></figcaption></figure>

3. Expand the **Single sign-on & Domain verification** section. To do so, select the expand arrow at the far right of the section header or select the **View SSO links** button.
4. Select **Edit Configuration**. The **Configure Your Connection** page opens.

<div align="left"><figure><img src="https://2223713658-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FB4UT2GNiZKjtxFtcFAL7%2Fuploads%2Fgit-blob-8caaedb065d8ceff7ebd84dece132c4d7bfbf1bc%2Fsonarqube-cloud-sso-verify-domain-via-edit-configuration.png?alt=media" alt="The Single sign-on &#x26; Domain verification section expanded, showing the Edit Configuration button." width="563"><figcaption></figcaption></figure></div>

5. Select **Domain Configuration** to open the Domain Configuration assistant.

<figure><img src="https://2223713658-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FB4UT2GNiZKjtxFtcFAL7%2Fuploads%2Fgit-blob-ba38a4e6ef3d9d855c226ad0b8aa6894147c38b2%2Fsonarqube-cloud-start-domain-configuration-assistant_Cs0255.png?alt=media" alt="Select Domain Configuration."><figcaption></figcaption></figure>

## Step 2: Verify your domain in the assistant

1. In **Domain**, enter your domain name (`domain-name.com`) and select **Add Domain**. The domain is added to the **Pending Domains** section with a TXT record name and content.
2. Ask your domain administrator to add the TXT record to the domain.

{% hint style="info" %}
When adding the TXT record in your DNS provider, use only the TXT record name prefix; *do not append your domain name at the end of the TXT record name*. For example, if the TXT record name is `_ss-verification.org_XXXX.mydomain.com`, only enter `_ss-verification.org_XXXX` as the record name. Your DNS provider will automatically append your domain.
{% endhint %}

3. Once the record has been added, select the **Verify** button. The assistant verifies that the record has been added to your domain.

<figure><img src="https://2223713658-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FB4UT2GNiZKjtxFtcFAL7%2Fuploads%2Fgit-blob-395e2b97c7fedba06d55df7074f351f6e2cb0a19%2Fsonarqube-cloud-verify-domain-for-sso_Cs0256.png?alt=media" alt=""><figcaption></figcaption></figure>

If the verification is successfull, the domain is removed from the **Pending Domains** section and added to the **Manage Domains** tab of the assistant.

## Relates pages

* [Set up SSO](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/set-up-sso.md)
* [Recovery account for SSO](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/recovery-account.md)
* [About SSO and provisioning](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/verify-domain.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.