Domains

Claiming your company's email domain lets colleagues join your Onehouse account by signing up with their work address, instead of waiting for an individual invite.

Domains are managed by account admins under Account Settings → Domains.

Claim a domain

1. Navigate to Account Settings → Domains.
2. Click Add domain.
3. Enter the domain, for example acme.com.
4. Choose how Onehouse should trust it — see Verification methods below.
5. Optionally add authorized sub-domains and turn on Auto-join.
6. Click Add domain.

note

A public email provider such as gmail.com cannot be claimed, and a domain already claimed by another Onehouse account cannot be claimed again.

Verification methods

Verify via DNS

The strongest option: you prove ownership by publishing a TXT record.

Field	Value
Type	TXT
Host / name	@
Value	the token shown on the domain's page

note

Copy the value exactly as shown, using the copy button on the domain's page. It already begins with onehouse-domain-verification= — do not add that prefix yourself, or the published record will carry it twice and verification will never succeed.

Onehouse checks for the record every 15 minutes and activates the domain once it is live. DNS changes can take a few hours to propagate, so there is nothing to do but wait — the domain's page shows We keep checking for this record until it appears. while that is happening.

warning

A domain that is never proven expires after 7 days, and you will need to add it again. Once verified, keep the record in place: Onehouse re-checks it every 24 hours, and a domain whose record stays missing for 72 hours is deactivated.

If a domain does lapse to Failed or Expired, its page offers Check the record now to queue an immediate re-check once you have restored the record.

Approve without verification

If you already trust the domain, an admin can approve it by email instead of publishing DNS proof.

• The domain stays Pending until an admin opens the emailed confirmation link.
• That link expires after 7 days. You can send a new one from the domain's page, which invalidates the previous link but does not change the expiry date.
• Auto-join behaves exactly as it does for a DNS-verified domain.
• An approved domain is not eligible for identity-provider binding, which requires DNS verification.

Upgrading an approved domain to DNS

You can upgrade an approved domain to DNS verification later from its page. The upgrade costs you nothing while it is in flight:

• The domain stays Approved and keeps admitting members for the whole attempt.
• When the record appears, the domain becomes Verified.
• If the record never appears within 7 days, only the upgrade is abandoned — the domain stays approved and auto-joining exactly as it was before you started.

There is no button to force a check during an upgrade; Onehouse sweeps for the record on its own.

Primary domain and sub-domains

Each account has one primary domain — the one new members are matched against first, and the default that other domains can copy their placement from.

• The first domain you add becomes primary automatically.
• Promoting another domain demotes the current one in the same step, so there is never a moment without a primary.
• The primary domain cannot be removed. Promote another domain first.

Authorized sub-domains let users on eng.acme.com join under the acme.com claim. Each must sit under its parent domain. Sub-domains inherit the parent's verification — they do not need their own DNS record.

Auto-join and placement

Auto-join controls whether a matching user joins automatically on sign-up.

important

Auto-join is off on a newly claimed domain. Nobody joins automatically until an admin turns it on. A user whose domain is claimed but whose auto-join is off sees a message explaining they cannot join automatically, and can create their own account or contact support instead.

When auto-join is on, Placement for new members decides where those users land:

Option	What new members get
Copy from Primary	Whatever the primary domain's placement was at the moment you chose this.
Use system default	Account Reader, no project — view-only.
Configure custom	Specific projects and a role that you choose.

warning

Copy from Primary is a one-time snapshot, not a live link. It copies the primary domain's placement when you select it. Changing the primary domain's placement later does not update the domains that copied it — open each one and set its placement there.

Placement applies only while auto-join is on, and only to users joining from that point onward. It never changes where existing members already sit.

Remove a domain

Removing a domain stops auto-join for new sign-ups immediately. Members who already joined keep their access — they are never removed or downgraded.

The primary domain cannot be removed until another domain is promoted in its place.

Related

• Users — invites, and how users join an account
• Permissions — what each role can do