- Home
- /
- Article
Thanks for your feedback.
In this article
Feedback?Some Control Hub features require proof of domain ownership. Others use domains to ensure the security and integrity of your organization. You can also use domains to help with user management. This article describes how to add, verify, claim, release, or remove domains when you don't need them any more.
Overview
Use domains in Control Hub to prove domain ownership, protect your organization's identity, and manage where users with your email domains join your organization.
Verifying a domain proves to Webex that your organization owns that domain. Verify a domain before you claim it.
Claiming a verified domain reserves that domain for your organization. After you claim a domain, new users who sign up with that domain join your organization instead of another organization or the free consumer organization.
You can release a claimed domain or remove a verified domain when your organization no longer needs it, such as when you sell a domain, finish a trial, or need to move the domain to another organization that you manage.
For information on domain management for Webex for Government, see Domain management in Webex for Government.
Add and verify a domain
Verify domains to prove that your organization owns them. You must verify a domain before you claim it. Verification also helps you claim users into your organization if they signed up in a different organization.
To manually verify a domain, Webex provides a verification token that you add to your domain host's DNS TXT record. Webex then checks for that token on the DNS server to confirm ownership.
If you add a domain with Entra ID, domain ownership is verified automatically through your identity provider, and you don't need to add a TXT record to your DNS server.
Before you begin
-
You must own the domains you want to verify and claim.
-
For Hybrid Calling for users and Webex-registered devices, you must verify domains that are contained in the on-premises directory URIs for user accounts on Unified CM.
-
You’re forced to verify in a particular order to prevent administrator lockout. For example, you must add the administrator domain first, followed by all the other domains.
| 1 |
Sign in to Control Hub. |
| 2 |
In the left-hand navigation pane, under Management, click Organization Settings. |
| 3 |
Scroll to Domains, and click either Add manually or Add with Entra ID.
|
| 4 |
Enter your domain name and click Add. |
| 5 |
Click the ellipsis |
| 6 |
Copy the verification token into your DNS TXT record.
|
| 7 |
Choose one:
|
| 8 |
Click Verify next to each domain. |
beside your domain and choose -
If the verification fails, the error is cached by your DNS server. Your DNS server clears the cache after the specified length of time in the Time To Live (TTL) setting. You must wait to try again after the DNS server clears the cache. You can add the verification token again and request the verification for the domain.
-
If the verification token is found and matched, the domain status changes to Verified in Control Hub. To confirm that your domains are verified, go to Control Hub, click Organization Settings, scroll to Domains, and then confirm that this status appears next to the domain entries:
If a domain is verified in multiple organizations, it can’t be claimed by any of them. To claim a domain, it must only be verified in your organization.
After the domain is verified, the TXT record is no longer required and you can remove the verification token from your DNS server.
-
Although you've verified a domain, other organizations may continue to have users with this domain. Old consumer accounts won’t be automatically converted to organization users. If your domains are verified and users signed up for Webex App accounts, you can convert those users to licensed users in your organization.
Claim a domain
After you claim a domain, new users who sign up with that domain join your organization instead of another organization or the free consumer organization. No other Webex organization can add new users with your claimed domain.
Convert existing consumer users or users who already belong to another organization before you claim the domain. Claiming a domain doesn't automatically move those users into your organization.
-
Claim a verified domain to reserve that email domain for use only in your Webex organization.
-
You can only claim a domain if it's verified in a single organization. If the same domain is verified in more than one organization, you won’t be able to claim it in any of those organizations. To claim the domain, make sure it’s only verified in your organization.
Release a claimed domain if you need to claim it in a different organization that you own or manage.
You can prevent users from self-registering if you want to control user creation/synchronization in your organization.
Before you begin
Registration errors can occur as a result of errors that are made in claiming domains. Before you claim any domains, make sure that you understand the following:
-
Service Providers shouldn’t claim the domains of customer organizations that they manage. They should claim only the domains of those users that are in the Service Provider's internal organization. Claiming the domain of users in a separate organization (even one that the Service Provider manages) can result in registration errors for the users in the customer organization as user authentication requests get routed through the Service Provider rather than the customer organization.
-
If two customer organizations (Company A and Company B) share the same domain and Company A has claimed the domain, registration for Company B users may fail because user authentication requests are routed through the organization that has the domain claimed (Company A).
Before a domain claim, you must ensure that your domains are verified. Otherwise, your request may be rejected for security reasons. For example, you can’t claim a domain that belongs to another enterprise.
| 1 |
Sign in to Control Hub. |
| 2 |
Under Management, click Organization Settings. |
| 3 |
Scroll to Domains, click |
| 4 |
Select Claim. After a domain is claimed, the status appears next to the domain entries as:
After a domain is claimed, admins outside of the organization who attempt to add users using a claimed domain will receive an error message. Users who exist within another organization before the domain was claimed aren’t affected. |
, then select 
What to do next
-
If you verified or claimed domains and want your Webex App users to be in a Verified state before they sign in for the first time, you can replace the email validation by doing the following:
-
Use Cisco Directory Connector to synchronize users from an Active Directory into Webex App.
-
Configure Single Sign-On (SSO) by integrating your organization's identity provider (IdP) with your Webex organization.
-
Activated users appear with a Pending status in Control Hub. After they sign in, they appear as Active. For more information about user statuses, see Users list in Control Hub.
-
-
You may want to prevent users from self-registering with your claimed domains. For more information, see Prevent users from self-registering with your domain.
-
Assign services to your users. While domain claim aligns users to your organization, these users only have free services until you add extra paid services to each user.
Release or remove a domain
Release a claimed domain or remove a verified domain when your organization no longer needs it. For example, release or remove a domain if your organization sold it or if you finished a trial that used a test domain. You can release or remove a domain at any time.
When you release a claimed domain, the domain remains verified in your organization. When you remove a verified domain, Control Hub no longer lists the domain as verified or claimed.
Before you begin
If your organization uses Webex Hybrid Call Service, you may affect the service if you remove a verified domain that is contained in your users' on-premises directory URIs.
| 1 |
Sign in to Control Hub. |
| 2 |
Under Management, click Organization Settings. |
| 3 |
Scroll to Domains, click
After you release a claimed domain, new users with that domain can join an organization other than your own. This behavior doesn't affect existing users in your organization. |
Troubleshooting
If you experience problems with domain verification in Control Hub, refer to Domain Verification Failed in Control Hub to help you verify your domains more effectively.
For more information, see Add, Verify, and Troubleshoot a Domain for Control Hub to ensure smooth domain management in your organization.
