Skip to content
Browse the docs

Verified Domains and Join Requests

Verify your company's domains with a DNS TXT record, and decide whether people who sign up with an address there are offered a company account.

A verified domain proves that your company controls an email domain. You need one for single sign-on and SCIM, and it lets Kalima suggest a company account to people who sign up with an address there. Verified domains are part of the Enterprise plan.

Open Sign-in & security and scroll to Domains. Owners and admins manage them.

Verify a domain

1
Under Add a domain, enter the domain name only, for example company.com, without https:// and without a path. Choose Add.
2
Choose Show TXT record and copy the Name and Value. The record belongs to the domain itself, with nothing in front of it. Most DNS providers want @ in the name field for that, or the field left empty.
3
Add the TXT record at your DNS provider. The value starts with kalima-verification=.
4
Kalima looks for the record daily for 14 days. New records often show up within minutes, sometimes only after a few hours. Choose Check now to look at once.

Once the record is found, the status changes from Pending to Verified.

How verification works

  • A verified domain also covers all of its subdomains.
  • Keep the record in place: Kalima checks daily that it is still there. If it is missing for 7 days in a row, the status changes to No longer verified. Add it again, then use Check now.
  • A domain, its parent domain or its subdomains can be verified by only one company on Kalima.
  • Domains of email providers for private people (such as gmail.com or outlook.com) and of throwaway address providers cannot be verified.
  • Your company can add up to 20 domains.
  • Remove takes a domain off the list at once. Removing a verified domain asks for your second factor; afterwards Kalima no longer offers anyone a company account through it, and another company can verify it.

Suggest joining

For each verified domain you decide whether Kalima offers a company account to people who sign up with an address there. In the domain's actions menu, choose Change join suggestion.

ModeWhat happens
OffKalima does not offer a company account.
With approvalThe request appears under Members in Join requests. Only when someone who may invite members approves it does the invitation go to the address by email.
Without approvalKalima sends the invitation to the address by email at once, while a seat is free. The open invitation holds a seat.

Anyone who signs up with email and password using an address at the domain (or a subdomain) sees the note "Your company uses Kalima" and can ask for a company account instead of a private one. Kalima does not show your company's name there; it appears in the invitation.

Join requests

Open Members and choose Join requests. Each request shows the address, the name given, the domain, and when it expires. Approve sends the usual invitation: the person joins the company as a member without a team after accepting, and the open invitation holds a seat for 7 days. Deny sends nobody a message. Open requests expire after 30 days.

What domains never do

  • No automatic joining: nobody becomes a member of your company without an invitation.
  • No takeover: existing Kalima accounts on your domain stay as they are, and the console does not list them.
  • Private accounts stay possible: anyone can still sign up with a private account. Signing up with Google or Apple shows no note at all.
Single sign-on (SSO)
Needs at least one verified domain.
User provisioning (SCIM)
Creates accounts only for addresses in verified domains.
Members
Invite people directly.