Verifying your workspace domain

Verifying a domain confirms to Nestr that your workspace owns a company email domain such as example.com. Once a domain is verified, Nestr can treat everyone with an email on that domain as part of your organisation, which unlocks several admin and security features.

What a verified domain unlocks

• Auto-join: people who sign up with an email on the domain can join the workspace automatically (you control this per domain).
• Editing a member's name and email: admins can edit the name and manage the email addresses of members who have an email on a verified domain. See Managing users, invitations & permissions.
• SAML single sign-on: route logins on the domain to your identity provider. See SAML authentication for Nestr.
• SCIM user provisioning: sync users automatically from your identity provider. See SCIM user provisioning.

Note that you can enable/disable these features based on your needs.

Adding a domain

Only workspace admins can add domains.

1. Go to Workspace settings → User Permissions & Domains.
2. Find the Workspace associated domains section.
3. Click Add domain, enter the domain (for example example.com), and click Add.

The domain appears in the list straight away with a Pending verification status, shown as a clock icon.

How verification works

You do not need to add a DNS record. After you add a domain, the Nestr team reviews the request to confirm the domain belongs to your workspace. This usually happens within 24 hours. Once approved, the domain shows a green Verified check and the features above become available.

If a domain has been pending for more than 24 hours, contact us and we will look into it.

Turning auto-join on or off

Each verified domain has an Auto-join toggle. When it is on, new users who sign up with an email on that domain join the workspace automatically. Turn it off if you want to keep the domain verified for name and email editing, SAML, or SCIM without letting everyone in automatically. Whether new members still need admin approval depends on your invitation settings on the same page.

Removing a domain

Click the trash icon next to a domain to remove it. Members who already joined keep their access, but the features tied to that domain stop applying.