Domain is the sole source of organization power in Zas. You prove ownership by publishing a DNS TXT record. Zas re-checks this record on a schedule. If the proof lapses, your organization’s powers lapse.
How to prove your domain
Get your proof string
In Zas organization settings, go to Domain proof and copy the TXT record value.
Add the TXT record
In your DNS provider, create a TXT record at _zas.yourdomain.com with the value provided.
Verify in Zas
Return to Zas and click Verify. Zas checks the DNS record and activates your domain powers.
What domain powers unlock
- Custom subdomain or your own domain for Zas access
- Domain-locked channels (Enterprise)
- Org-wide policies tied to verified membership
- SCIM provisioning scoped to the domain
Re-checking and lapses
Zas re-checks your DNS TXT record on a schedule. If the record is removed or changed, your domain powers are suspended. Members can still access Zas, but admin features that depend on domain proof are disabled until the record is restored.
Do not remove the TXT record after verification. Keep it in place for continuous proof.
What to read next
