If you have a private domain (e.g., yourcompany.com), you can claim and verify it in Expensify to manage employee permissions and enable additional security features.

What you can do with a claimed and verified domain

Once you’ve claimed and verified a domain, you can:

• Configure SAML login
• Enforce SAML login for domain members

Step 1: Claim Your Domain

To claim a private domain, you must:

• Be logged in with an email address from that domain
• Have verified your contact method with a magic code

Steps to claim your domain

1. From the left-hand menu, go to Workspaces > Domains.
2. Click the Enable button. a. If you have already claimed one or more domains, click the New button in the upper-right hand corner > New domain to add a new domain.
3. Enter the name of your private domain (e.g., yourcompany.com) in the form.
4. Click Continue.

Where to find domain settings

From the left-hand menu, select Workspaces > Domains.

If you haven’t claimed a domain yet, you’ll see a section labeled Enhanced security explaining the benefits of domain control. Once domains are claimed, the Enhanced security section is relabeled as Domains.

Each domain is listed in its own row, showing:

• Domain name
• Verification status (Verified, Not verified)
• Overflow menu with management options

What happens next?

Depending on your email setup:

• If you’re not using an email from that domain: You’ll see an error. You can’t claim domains that don’t match your email address..
• If your email is from that domain but not verified: You’ll be prompted to verify your login using a magic code.
• If the domain is already claimed: You’ll need to coordinate with an existing admin to request that your role be updated to Domain Admin.

After the domain is successfully claimed, the domain will appear under Workspaces > Domains in the Not verified state.

Step 2: Verify Your Domain

To unlock advanced security settings and enable SAML, the domain must be verified through a DNS record.

Steps to verify your domain

Note: This process may be managed by your IT department or web consultant.

1. Log in to your DNS service provider (e.g., Namecheap, GoDaddy, Amazon Route 53).
2. Locate the DNS Records page (sometimes labeled as DNS Management or Zone File Editor).
3. Add a TXT record with the verification value provided in Expensify under Workspaces > Domains > three-dot menu > Verify domain.
4. Save your changes.

Once verified, you’ll see a confirmation message and your domain will be marked as Verified.