Account Domain Controls
Overview
Account Domain Controls enable you to claim ownership of an email domain like 'example.com' and force all log-in and sign-up attempts from emails on that domain to use your account. Domain Controls are a policy tool to enforce all users at your organization to use a single ngrok account that you've set up with appropriate security controls.
A Domain Control may only be created on an account that has a Single Sign-On Identity Provider configured.
Verification
Creating an Account Domain Control requires that you verify your ownership of the domain.
When our Customer Success team creates your Account Domain Control, you'll be asked to prove your ownership of the domain. There are different verification methods, but the most common is to create a DNS TXT record on the domain you're setting up.
Behavior Changes
Log in
When an Account Domain Control for example.com
exists, anyone attempting to
log in with an example.com
email address will be required to log in with the
Single Sign-On IdPs configured on your account. They will be presented with
links to those IdP on the log-in page.
Account Sign-Up
When an Account Domain Control for example.com
exists, signing up for a new
account with an email address on example.com
can be disallowed. Users will be
redirected instead to log in with the SSO IdPs configured on your existing
account.