A verified domain in JIRA is not accessible by other site admins?

[Sam]

Hi,

One of our site admins has verified the domain using the ticket and the domain got verified. But the other site admins are unable to access it. Should every site admin need to verify the domain each time? If so each time an unique ticket is created? Can you please inform me whether the verified domain will have any expiry? It is not showing up that the domain is verified? We are trying to create SAML SSO. I hope the question is clear if not please let me know I would narrate the issue more clearly. 

Thanks,

Sai Sampath.

[Andy Heinzer · Accepted solution]

Hi,

When you verify a domain on our Atlassian Cloud platform, that user that first verifies the domain becomes the first organization admin.  That user can then invite other site-admins to become organization admins.  But until they do that, the other site-admins won't be able to reach that page.   This is explained in the documentation from Domain verification - Atlassian Documentation:

To be able to manage those Atlassian accounts, you create an organization. You become the first organization admin and you can invite other site admins to be organization admins.

As for your other questions about expiration of domain verification, those too are explained in that document:

After verification is successful, we'll periodically check your DNS host for the txt record.  If someone deletes or updates the txt record with incorrect information, we'll send you an email letting you know that you have a certain amount of time to update the txt record. If you don't, your domain will lose its verification status. If this happens, any Identity Manager security policies in place for that domain, including SAML single sign-on, won't be effective.

So provided that your DNS settings remain accurate, this verification will not expire. 

[Sam]

Thank you Andrew, will there be any expiry date for the verified domain? 

[Andy Heinzer]

There is not an explicit expiration date or time period.   However if you were to change your DNS to remove the DNS record (or alter the HTTPS root page if using this verification method), then when Atlassian is periodically checking your domain, it is possible you would get a notification first that these settings need to be changed.  If you fail to correct this, then yes, eventually a domain could lose a verification status with Atlassian.  However it is not clear to me what the specific time period interval is for this change.   It could be hours, days, or weeks. 

However as long as your domain continues to verify via the method you setup (ie DNS TXT record or HTTPS root page method), the domain verification will not be able to expire with Atlassian.

[Sam]

Got it thanks Andrew. 

[Juanita Burkhart]

Got it .Thank you.juanita