This version of GitHub Enterprise Server was discontinued on 2024-09-25. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise Server. For help with the upgrade, contact GitHub Enterprise support.

Verifying or approving a domain for your organization

You can verify your ownership of domains with GitHub to confirm your organization's identity. You can also approve domains that GitHub can send email notifications to for members of your organization.

Who can use this feature?

Organization owners can verify or approve a domain for an organization.

In this article

About domain verification

After verifying ownership of your organization's domains, a "Verified" badge will display on the organization's profile.

A "Verified" badge will display on your organization's profile for any domains verified for the enterprise account, in addition to any domains verified for the organization. Organization owners can view any domains that an enterprise owner has verified or approved, and edit the domains if the organization owner is also an enterprise owner. For more information, see "Verifying or approving a domain for your enterprise."

To display a "Verified" badge, the website and email information shown on an organization's profile must match the verified domain or domains. If the website and email address shown on your organization's profile are hosted on different domains, you must verify both domains. If the website and email address use variants of the same domain, you must verify both variants. For example, if the profile shows the website www.example.com and the email address info@example.com, you would need to verify both www.example.com and example.com.

After verifying ownership of your organization's domain, you can restrict email notifications for the organization to that domain. For more information, see "Restricting email notifications for your organization."

If you confirm your organization’s identity by verifying your domain and restricting email notifications to only verified email domains, you can help prevent sensitive information from being exposed. For more information see "Best practices for preventing data leaks in your organization."

About domain approval

Note

The ability to approve a domain not owned by your organization or enterprise is currently in beta and subject to change.

If you want to allow members to receive email notifications at a domain you don't own, you can approve the domain, then allow GitHub to send email notifications to addresses within the domain. For example, you can allow a contractor who doesn't have an email address within your own domain to receive email notifications at a domain you feel comfortable with.

After you approve domains for your organization, you can restrict email notifications for activity within the organization to users with verified email addresses within verified or approved domains. For more information, see "Restricting email notifications for your organization."

Enterprise owners cannot see which organization members or email addresses receive notifications within approved domains.

Enterprise owners can also approve additional domains for organizations owned by the enterprise. For more information, see "Verifying or approving a domain for your enterprise."

Verifying a domain for your organization

To verify a domain, you must have access to modify domain records with your domain hosting service.

  1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations**.

  2. Next to the organization, click Settings.

  3. In the "Security" section of the sidebar, click Verified and approved domains.

  4. Next to "Verified & approved domains for your enterprise account", click Add a domain.

  5. Under "What domain would you like to add?", type the domain you'd like to verify, then click Add domain.

  6. Follow the instructions under "Add a DNS TXT record" to create a DNS TXT record with your domain hosting service.

  7. Wait for your DNS configuration to change, which may take up to 72 hours. You can confirm your DNS configuration has changed by running the dig command on the command line, replacing TXT-RECORD-NAME with the name of the TXT record created in your DNS configuration. You should see your new TXT record listed in the command output.

    dig TXT-RECORD-NAME +nostats +nocomments +nocmd TXT

  8. After confirming your TXT record is added to your DNS, follow steps one through three above to navigate to your organization's approved and verified domains.

  9. To the right of the domain that's pending verification, select the dropdown menu, then click Continue verifying.

    Screenshot of the "Verified & approved domains" page. To the right of a domain that is pending verification, a kebab icon is outlined in dark orange.

  10. Click Verify.

  11. Optionally, once the "Verified" badge is visible on your organization's profile page, you can delete the TXT entry from the DNS record at your domain hosting service.

Approving a domain for your organization

Note

The ability to approve a domain not owned by your organization or enterprise is currently in beta and subject to change.

  1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations**.

  2. Next to the organization, click Settings.

  3. In the "Security" section of the sidebar, click Verified and approved domains.

  4. Next to "Verified & approved domains for your enterprise account", click Add a domain.

  5. Under "What domain would you like to add?", type the domain you'd like to verify, then click Add domain.

  6. To the right of "Can't verify this domain?", click Approve it instead.

    Screenshot of the "Verify domain" page. To the right of the "Verify" button, a link, labeled "Approve it instead," is outlined in dark orange.

  7. Read the information about domain approval, then click Approve DOMAIN.

Removing an approved or verified domain

  1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations**.

  2. Next to the organization, click Settings.

  3. In the "Security" section of the sidebar, click Verified and approved domains.

  4. To the right of the domain to remove, select the dropdown menu, then click Delete.

    Screenshot of the "Verified & approved domains" page. To the right of a domain, a kebab icon is outlined in dark orange.