Verifying your domain ownership is a crucial security step that proves you control your domain. This is a prerequisite for enabling features such as Email Domain Authentication and Single Sign-On (SSO), which help secure and streamline access to your organization.
Prerequisites
🔑 To verify your domain, you must have the ability to add or modify DNS records for that domain, typically through your domain registrar's website or DNS hosting provider.
Steps to Verify Your Domain
Follow these steps to initiate and complete the domain verification process:
1. Navigate to Access Settings
Go to your settings and click on Access under the Administration section in the left-hand navigation menu.
Click Access in the administration settings menu
🔑 Only users with the Admin role can initiate and manage domain verification within the platform.
2. Initiate Domain Verification
On the Access settings page, locate the Domain Ownership section and click the Activate domain verification button.
Click on the Activate domain verification button
3. Add DNS TXT Record
A modal window will appear with instructions. It will provide you with a unique verification code that you need to add as a TXT record to your domain's DNS settings.
Log in to your domain registrar or DNS provider's website.
Navigate to the DNS management section for your domain.
Create a new DNS record with the following details:
Type:
TXTHost/Name: Usually
@or your domain name (e.g.,yourdomain.com.), but follow your provider's specific instructions.Value/Data: Copy the unique verification code provided in the modal (e.g.,
mistral-domain-verification=xxxxxxxx) and paste it here.
Save the new DNS record.
Modal showing the unique TXT record value needed for DNS verification.
4. Wait for DNS Propagation
After adding the TXT record, it needs time to propagate across the internet's DNS system.
The
Accesspage may now show a message like "Domain verification pending for yourdomain.com".Propagation time typically takes between 10 minutes and 24 hours, although it can sometimes take longer depending on your DNS provider and TTL settings.
💡 Tip: You can optionally check the propagation status using a command-line tool like nslookup. Open a terminal (macOS/Linux) or Command Prompt (Windows) and run: nslookup -type=TXT yourdomain.com. Look for the TXT record containing the mistral-domain-verification= value in the output. Repeat periodically until it appears.
If verification is still pending after 24-48 hours, double-check that the TXT record was added correctly and contact support if necessary.
🚨 Important: To ensure that features relying on domain verification (like Email Domain Authentication or SSO) continue to function correctly, you must maintain the DNS TXT record used for verification. Do not delete this record after verification is complete.
5. Verification Confirmation
The platform will periodically check for the DNS record. Refresh the Access page periodically to check if the status on the page has been updated: you will see a confirmation message under the Domain verification section, such as Your domain domain.com is verified.
Access page showing the confirmation message that the domain is verified
Your domain is now verified, and you can proceed to enable Email Domain Authentication or configure Single Sign-On (SSO).