Verifying your domain ownership is a crucial security step that proves you control your domain.
It is a prerequisite for enabling features such as Email Domain Authentication and Single Sign-On (SAML SSO), which help secure and streamline access to your organization.
π To verify your domain, you must be able to add or modify DNS records, typically through your domain registrar or DNS hosting provider.
Steps to verify your domain
1. Navigate to access settings
Go to your settings and click Access
under the Administration section in the left-hand navigation menu.
Click Access
in the administration settings menu
π Only users with the Admin
role can initiate and manage domain verification.
2. Initiate domain verification
On the Access
settings page, locate the Domain ownership
section and click Add domain
. A modal opens.
Click Add domain
3. Add DNS TXT record
First initiate domain verification:
Enter your domain in the modal (e.g.,
yourdomain.com
) and clickAdd domain
.Your new domain will appear as
Pending
(verification in progress).
You should now add a DNS TXT record to your domain:
Click
Instructions
and copy the your domainβs unique DNS TXT record.Log in to your domain registrar or DNS provider.
Navigate to DNS management.
Add a new TXT record with:
Type:
TXT
Host/Name:
@
or your domain (depends on provider).Value/Data: Paste the verification code (e.g.,
mistral-domain-verification=xxxxxx
).
Save the record.
Click Instructions
to see the TXT record value then configure it in your DNS provider
π You can check propagation with nslookup -type=TXT yourdomain.com
in a terminal or command prompt. Look for the mistral-domain-verification=
value.
4. Wait for DNS propagation
The status will remain Pending
until the TXT record is detected.
Propagation usually takes 10 minutes to 24 hours, but may take longer depending on your DNS provider and TTL.
If verification is still pending after 24β48 hours or you receive an error message, double-check the record and repeat the process. If the issue persists, contact support βοΈ.
π¨ Keep the DNS TXT record active. Removing it can break features that depend on verification, such as Email Domain Authentication or SSO.
5. Verification confirmation
The platform will periodically check for the record. Once detected, the domain status changes to Verified
.
Access page showing a verified domain
Next steps
Now that your domain is verified, letβs configure Email Domain Authentication or SAML SSO to control how new users can join your organization.
π§βπ§ Iβm an administrator and I want to enable Email Domain Authentication.
π§βπ§ Iβm an administrator and I want to enable SAML SSO.