Documentation

Unity Cloud

Get Started

Asset Manager SDKs and services

Open Unity Dashboard

Unity Cloud

Register and validate domains

Prove ownership of your email domains so that you can manage the users within them
Read time 3 minutesLast updated a day ago
Register a domain to manage the Unity users whose email addresses belong to it. Registering and validating a domain is the first step of setting up both Enterprise single sign-on (SSO) and SCIM provisioning. Until at least one domain is validated, neither can be enabled.
Unity uses domain validation for these purposes:
  • Domain ownership: domain validation ensures legitimate ownership and control of the domain.
  • Prevent fraudulent activity: domain validation helps prevent domain impersonation and the fraudulent configuration of applications.
  • Trust anchor: domain validation acts as a form of trust anchor.
Other parties can't easily perform these actions:
  • Claim to represent the organization via your domain.
  • Configure applications or services for unauthorized access or misuse of the organization's identity.

Register a domain

To register a domain for your organization, follow these steps:
  1. Sign in to the Unity Dashboard.
  2. Open the Account menu and select Manage organization.
  3. In the Administration menu, select SSO & SCIM.
  4. On the Domains tab, select Add domain.
  5. Enter the domain that you want to register, and then select Add and validate.

Validate a domain

To validate a domain, follow these steps:
  1. If you have closed the domain information window, select View details next to the domain to open it again.
  2. Copy the entire DNS TXT record from the domain information window. The record is a string in the format 
    unity-sso-verification=<your-unique-token>
    .
  3. Sign in to the console of your DNS provider. Your DNS provider is typically your domain registrar, or a separate service such as Cloudflare, AWS Route 53, Azure DNS, or GCP Cloud DNS.
  4. Create a TXT record on your root (apex) domain, using these values:

    Field

    Value

    Type
    TXT
    Name / Host
    @
    , or leave blank, or enter your root domain, depending on your provider. Don't enter 
    unity-sso-verification
    here.
    Value / Content
    unity-sso-verification=<your-unique-token>
    TTLThe default value, for example 
    3600
    Important
    Don't create a subdomain named 
    unity-sso-verification
    . The string 
    unity-sso-verification=...
    is the value of a TXT record on your root domain, not a hostname.
  5. Optional: to check that the record has propagated, run this command:
    dig TXT yourdomain.com +short
    The output contains your 
    unity-sso-verification=...
    string.
  6. Return to the Unity Dashboard and select Validate.
When Unity finds the record, the domain status in Unity Cloud changes from Pending validation to Active.
It might take up to 48 hours for Unity to validate your domain through DNS propagation. This process informs upstream providers about domain information before it arrives at the hosting region.
After a domain has been validated, other organizations can't claim it until you delete the record from your organization.

Domain statuses

The Status column shows where each domain is in the validation process:

Status

Meaning

Pending validationUnity hasn't found the DNS TXT record yet. Select View details to see the record that your domain must publish.
ActiveUnity has validated the domain. You can use it with Enterprise SSO and SCIM provisioning.

Remove a domain

To remove a domain, follow these steps:
  1. In the Unity Dashboard, open the Account menu and select Manage organization.
  2. In the Administration menu, select SSO & SCIM.
  3. On the Domains tab, select Delete next to the domain you want to remove.
Unity deletes the domain record from your organization.
If you add this domain back to your organization, you must validate it again.

Next steps