Skip to content
  • There are no suggestions because the search field is empty.

How to verify your domain for single sign-on (SSO)

Add and verify a domain within MASV

As a Team Owner, you can verify the domain that will be used for your MASV Team SSO.

To verify the domain used for SSO in MASV

  1. As a MASV Team Owner, log in to the MASV Web App.
  2. From the sidebar on the left, ensure that you select the Team you want.
    Screen capture of the MASV Web App sidebar with Team menu selected.
  3. From the sidebar, select Features & Settings > SSO.
    If you don’t see SSO near the bottom of the sidebar, you might not have the required permissions. Please contact your Team Owner to request the necessary access. If you are an administrator but still do not see the SSO tab, SSO might not be enabled for your Team. Please contact support@masv.io for more information.
  4. On the SSO page, select the Domains tab or Subdomains tab, and enter the fully qualified domain name (FQDN) that you want to use for SSO in MASV.
  5. Select the Add Domain button. A verification token is generated and displays below the domain field.

    masv-sso-settings-domain-and-token
  6. Add a DNS TXT record containing this verification token on the domain you entered. The exact steps to do this will depend on the DNS service you use. 

  7. Ensure that the hostname matches the portion of the domain name you entered within MASV.

    • DNS record hostname tips:

      • Root domains

        If the domain you entered in MASV was [example.com], this is called a root domain, and you will likely not have to enter a host name. Many providers will let you leave the host name field empty, while for others you may have to enter @ to indicate that you want the record to exist on the root domain.

      • Subdomains
        If the domain you entered in MASV was [sub.example.com], this is called a subdomain, and you will have to enter the subdomain as the host name in the DNS record.

  8. After you add the TXT record to your DNS, select the Verify button.

    If the token disappears and a check mark displays next to your domain, the verification succeeded.

    If you see a Verification failed message, please double-check that you created the TXT record correctly and that you waited long enough for the record to propagate. DNS record propagation usually happens in under a few hours, but it can sometimes take multiple days for records to propagate worldwide.
  9. After your domain is verified, you’re ready to continue setting up SSO.
  10. Remove the TXT record (no longer needed).