Heads up: Verified domains and the DNS challenge are managed under Admin → SSO & Provisioning, alongside SSO and (when enabled) SCIM.
Keep your DNS pane open in one tab and InviziPoll in another-TXT propagation can take a few minutes; use Verify only after the record is visible in DNS.
How it works
Adding a domain generates a DNS TXT challenge in the format confipoll-verification=<token>. Add this record to your domain's DNS, then verify in InviziPoll. The system checks for the TXT record and marks the domain as verified on match.
Login enforcement
When SSO is enabled and a user's email matches a verified domain, password-based signup and login are blocked in favor of identity provider authentication.
Entitlement - DNS domain verification (with SSO) is an Enterprise-tier capability. Workspaces on lower tiers are prompted to upgrade or talk to the account team.
