Once you have added an identity provider and added a domain, you'll need to verify ownership of your domain before it can be used for SSO.

You can check if your domain needs to be verified by looking for the 'Pending Verification' label against your domain.

1. Click the Account Name > Admin.

2. In the Integrations section, click the Single Sign-On subheading.

3. If your domain needs to be verified, click the three dots icon next to the domain and select Verify from the drop-down.

4. You'll be shown instructions on how to verify your domain.

You'll need access to the DNS records for your domain, and to add a TXT record with the value shown in the on screen instructions.

Note: The specific value to be added as a TXT record is different for every domain added to ExpenseIn. You should not use a value from another domain, or the one in the screenshot below.

ExpenseIn will periodically check the DNS records for the presence of the TXT value. If the value from the instructions is found, then the domain will be verified and may be used for Single Sign-On.

If you wish, you may trigger an immediate check by clicking the Verify Now button below the instructions. However, it should be noted that DNS record propagation can take several hours, so any changes may not be visible to our servers immediately.

A successfully verified domain will no longer have the 'Pending Verification' label and will instead show a 'Verified' label.