Verifying Your SSO Domain

Jamf Account Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Before creating a new connection between an identity provider (IdP) and Jamf Account, Jamf needs to verify that the domain is owned by your organization.

Requirements

You must meet the general Requirements for SSO.

  1. In Jamf Account, navigate to Organization > SSO.
  2. Click Domains > Add a domain.
  3. Enter the domain name and click Save.

    A confirmation message appears and a unique DNS TXT record is generated.

    Note:

    Keep the following in mind when working with domains:

    • It may take anywhere between a few minutes to a few hours for the DNS TXT record to appear.

    • While subdomains can be validated, Jamf recommends validating subdomains only if you plan to log in with that subdomain.

    Warning:

    Jamf offers domain validation with persistent DNS TXT records only. Do not remove or alter the DNS TXT record, or SSO will stop working after 14 days, during which Jamf will send several email notifications regarding verification.

  4. Copy the DNS text record and follow the instructions on the screen to add it to your domain registrar.
    Important:DNS TXT records are case sensitive.
  5. In Jamf Account, click Verify next to the domain name.
If the domain status remains as pending, see Resolving a Pending SSO Domain.

After verifying your SSO domain, you can add an SSO connection in Jamf Account.