Verify your company's domain

Pilot

Domain verification is currently enabled only for pilot organizations. It is not generally available yet. The Domains tab is part of the new version of the dashboard.

A verified domain proves that your organization owns an e-mail domain such as acme.com. Focus needs it for single sign-on: only addresses of verified domains can sign in through your connection, be added on their first sign-in or find your company sign-in by their e-mail address.

Owners and admins manage domains in Settings → Security → Domains.

Add domain

1. Open Settings → Security → Domains.

2. Enter the domain, for example acme.com, and choose Add domain. Subdomains such as eu.acme.com work too. Confirm your sign-in if you are asked to.

3. The domain card shows the DNS record to create, each part with a copy button:

   Type	TXT record name	TXT record value
   TXT	_workify360-verify.acme.com	w360-verify= followed by the code Focus shows

4. Create the TXT record at your DNS provider. Some providers add the domain to the name by themselves; then enter only _workify360-verify.

5. Wait until the record is published, often a few minutes, sometimes longer, and choose Verify on the card.

When Focus finds the record, the domain shows as verified. If it does not, the card says “The TXT record was not found yet.” and lists up to 5 TXT values Focus found under that name as Records found (domain_verification_failed), so you can compare them with the expected value. Values are compared exactly, including upper and lower case.

Keep the TXT record after verification: Focus checks it again every month.

Domain statuses

Status on the card	Meaning
Waiting for verification	Added; create the TXT record and choose Verify before the date shown
Verified	Focus found the record
Check failing	The monthly check did not find the record; the domain still counts as verified until the date shown
Expired	Not verified within 7 days; remove it and add it again

The 7-day claim period

You have 7 days after adding a domain to verify it; the card shows the last day. A domain that is still not verified after 7 days expires, and you can add it again with a new code.

Domains that cannot be added

Code	Why
domain_invalid	The name is not a valid domain, or it has more than 4 subdomain levels below your domain (a.b.c.d.acme.com is accepted, a.b.c.d.e.acme.com is not)
domain_not_allowed	Public e-mail domains such as gmail.com, hotmail.com or yandex.com, and public suffixes such as com.tr, belong to nobody’s company
domain_taken	Another organization has already verified this domain; one domain belongs to one organization only
domain_limit	An organization can have up to 20 domains

Two organizations can add the same domain while it is not verified; the first one to verify it gets it.

Monthly re-check and grace period

Focus checks every verified domain’s TXT record again every 30 days. If your DNS does not answer at all (for example a timeout), Focus tries again for up to 7 days; after that, an unanswered check counts as a missing record.

• If the record is missing, owners receive an e-mail and the domain shows as Check failing. It still counts as verified for 14 days, and the card says until when.
• If the record is back within those 14 days, nothing changes.
• After 14 days without the record, the domain is no longer verified and owners get another e-mail. Company sign-in discovery and adding people on first sign-in stop for that domain. Your SSO connection is not disabled, and people who have already linked their company account can still sign in.

To fix it, publish the TXT record again and choose Verify on the card.

Remove a domain

Choose Remove on the domain card and confirm. Removing a domain asks you to confirm your sign-in first. You cannot remove the last verified domain while an SSO connection is active (domain_in_use); disable the connection first in Settings → Security → Single sign-on.