Skip to content

Commit 983e42e

Browse files
Merge pull request #22415 from sarahsanders-docker/TXT-records
iam: add DNS host instructions for adding TXT records
1 parent 32617a6 commit 983e42e

File tree

1 file changed

+36
-15
lines changed
  • content/manuals/security/for-admins/single-sign-on

1 file changed

+36
-15
lines changed

content/manuals/security/for-admins/single-sign-on/configure.md

Lines changed: 36 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,12 @@ keywords: configure, sso, docker hub, hub, docker admin, admin, security
44
title: Configure single sign-on
55
linkTitle: Configure
66
aliases:
7-
- /docker-hub/domains/
8-
- /docker-hub/sso-connection/
9-
- /docker-hub/enforcing-sso/
10-
- /single-sign-on/configure/
11-
- /admin/company/settings/sso-configuration/
12-
- /admin/organization/security-settings/sso-configuration/
7+
- /docker-hub/domains/
8+
- /docker-hub/sso-connection/
9+
- /docker-hub/enforcing-sso/
10+
- /single-sign-on/configure/
11+
- /admin/company/settings/sso-configuration/
12+
- /admin/organization/security-settings/sso-configuration/
1313
---
1414

1515
{{< summary-bar feature_name="SSO" >}}
@@ -45,21 +45,43 @@ Get started creating a single sign-on (SSO) connection for your organization or
4545

4646
## Step two: Verify your domain
4747

48-
Verifying your domain ensures Docker knows you own it. Domain verification is done by adding your Docker TXT Record Value to your domain host. The TXT Record Value proves ownership, which signals the Domain Name System (DNS) to add this record. It can take up to 72 hours for DNS to recognize the change. When the change is reflected in DNS, Docker will automatically check the record to confirm your ownership.
48+
Verifying your domain ensures Docker knows you own it. To verify, you add a TXT record to your Domain Name System (DNS) host using the value Docker provides. The TXT Record Value proves ownership, which signals the DNS to add this record. It can take up to 72 hours for DNS to recognize the change. When the change is reflected in DNS, Docker automatically checks the record to confirm your ownership.
49+
50+
Use the **TXT Record Value** provided by Docker and follow the steps based on your DNS host. If your provider isn't listed, use the instructions for other providers.
51+
52+
> [!TIP]
53+
>
54+
> The record name field controls where the TXT record is applied in your domain, for example root or subdomain. In general, refer to the following tips for adding a record name:
55+
>
56+
> - Use `@` or leave the record name empty for root domains like `example.com`, depending on your provider.
57+
> - Don't enter values like `docker`, `docker-verification`, `www`, or your domain name. These values may direct to the wrong place.
58+
>
59+
> Check your DNS provider's documentation to verify record name requirements.
4960
5061
{{< tabs >}}
51-
{{< tab name="Admin Console" >}}
62+
{{< tab name="AWS Route 53" >}}
5263

53-
1. Navigate to your domain host, create a new TXT record, and paste the **TXT Record Value** from Docker.
54-
2. TXT record verification can take 72 hours. Once you have waited for TXT record verification, return to the **Domain management** page of the Admin Console and select **Verify** next to your domain name.
64+
1. To add your TXT record to AWS, see [Creating records by using the Amazon Route 53 console](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-creating.html).
65+
2. TXT record verification can take 72 hours. Once you have waited for TXT record verification, return to the **Domain management** page of the [Admin Console](https://app.docker.com/admin) and select **Verify** next to your domain name.
5566

5667
{{< /tab >}}
57-
{{< tab name="Docker Hub" >}}
68+
{{< tab name="Google Cloud DNS" >}}
5869

59-
{{% include "hub-org-management.md" %}}
70+
1. To add your TXT record to Google Cloud DNS, see [Verifying your domain with a TXT record](https://cloud.google.com/identity/docs/verify-domain-txt).
71+
2. TXT record verification can take 72 hours. Once you have waited for TXT record verification, return to the **Domain management** page of the [Admin Console](https://app.docker.com/admin) and select **Verify** next to your domain name.
6072

61-
1. Navigate to your domain host, create a new TXT record, and paste the **TXT Record Value** from Docker.
62-
2. TXT Record Verification can take 72 hours. Once you have waited for TXT record verification, return to the **Security** page of Docker Hub and select **Verify** next to your domain name.
73+
{{< /tab >}}
74+
{{< tab name="GoDaddy" >}}
75+
76+
1. To add your TXT record to GoDaddy, see [Add a TXT record](https://www.godaddy.com/help/add-a-txt-record-19232).
77+
2. TXT record verification can take 72 hours. Once you have waited for TXT record verification, return to the **Domain management** page of the [Admin Console](https://app.docker.com/admin) and select **Verify** next to your domain name.
78+
79+
{{< /tab >}}
80+
{{< tab name="Other providers" >}}
81+
82+
1. Sign in to your domain host.
83+
2. Add a TXT record to your DNS settings and save the record.
84+
3. TXT record verification can take 72 hours. Once you have waited for TXT record verification, return to the **Domain management** page of the [Admin Console](https://app.docker.com/admin) and select **Verify** next to your domain name.
6385

6486
{{< /tab >}}
6587
{{< /tabs >}}
@@ -76,4 +98,3 @@ The following videos walk through verifying your domain to create your SSO conne
7698
## What's next?
7799

78100
[Connect Docker and your IdP](../single-sign-on/connect.md).
79-

0 commit comments

Comments
 (0)