Validate your DNS Domains

Domain Validation lets SAML, SSO and other services confirm your ownership of a DNS domain when they authenticate user accounts in the domain.

When you configure Single Sign-On (SSO) access to your MyJFrog portal, users in your organization's domain access MyJFrog with their existing credentials. Domain validation confirms your ownership of the parent domain. This adds security and confidence when JFrog authenticates users defined in your Identify Provider(IdP).

To support validation, a DNS text record is associated with the domain at your DNS provider. When services query the DNS provider, the response includes the unique string of the text record. Services match the string to confirm your ownership of the domain.

MyJFrog exposes API endpoints for domain validation.

To validate a domain in the MyJFrog interface:

1. In MyJFrog, go to Settings > Domain Validation and click Add a Domain.

2. In the Domain Name field enter a domain in your organization that supports user accounts, and Click Generate Text Record.

   MyJFrog generates a unique text string. Click Copy to copy the string.

3. Browse to your DNS provider. In the self-service area, specify the domain you entered in Step 1 and search or navigate to the page that supports DNS records.

4. Define a new TXT (text) DNS record. In the record definition form, paste the string you copied in Step 2 into the TXT field (your provider may use a different field name).

   It can take up to 48 hours for the text record to propagate to all DNS servers.

5. In MyJFrog, go to Settings > Domain Validation. The table lists DNS domains that received JFrog TXT records for validation. Status values include:

   • Validated: JFrog queried your DNS, and the reply included the JFRog TXT record string.
   • Pending: JFrog did not yet confirm the TXT string in a DNS response.
   • Failed: JFrog queried your DNS, and the reply did not include the JFRog TXT record string.

6. Find the domain in the table. Click ... in that row and do one of the following:

   • Select Validate to initiate JFrog query of the DNS.
   • Select Delete to erase the domain validation. JFrog ignores the unique TXT record string even if it is received from the DNS. You must repeat domain validation.

Click Add a Domain to repeat this process for all your domains with user accounts that access MyJFrog, or to repeat a failed validation with a new TXT record.