Domain verification and join modes
A verified domain proves your organization owns it — and unlocks control over how new sign-ups from that domain are handled.
Verify a domain
- Open Settings → Domains and add your domain.
- Add the shown TXT record (
qadar-verify=<token>) to the domain's DNS, then select Check now. DNS changes can take a few minutes to propagate. - Alternatively use Verify by email: Shield sends a confirmation link to
postmaster@andadmin@of the domain.
Verified domains carry a Verified badge; you can mark one as Primary. A domain can only be verified by one organization — if yours is claimed unexpectedly, contact support.
Join modes
For a verified domain you choose what happens when someone signs up with a matching work email:
- Automatic — they join immediately as a Member. Lowest friction for trusted domains.
- Approval (default) — the sign-up becomes a pending request in Users & Roles → Requests; an admin approves or declines, and the person is emailed once they're in.
- Invite-only — owning the domain is not enough; an explicit invitation is required.
Without a verified domain, everyone joins by invitation only.
Was this article helpful?
Related articles
Invite your team
Invite members by email from Users & Roles, track open invitations, and handle join requests from your verified domain.
Read articleRoles and permissions
Admin, Security, Auditor, Member — what each role can do and how to change a member's role.
Read articlePrivacy and data handling
What admins can see about employees' AI usage, the privacy controls that govern it, and how long audit data is retained.
Read articleStill stuck?
Send us the details — we answer within one business day.