SAML2 and OIDC Single Sign-On integration allows you to configure multiple domains that can authenticate to Quickchannel.

Domains added by a domain-logged-in user are automatically verified. Other domains need to be verified by adding a DNS TXT record in the format _qc_challenge.=.

After creating a new domain that needs verification, Quickchannel attempts to verify it for 2 weeks, and then verification fails. 

To configure multiple domains in your SSO integration, first configure the integration for one domain by following the setup process described in the SAML2 idP or OIDC setup articles.

Once the integration is set up, press the edit button.

Here, you can add domains that should be allowed to pass the authentication process:

Added domains can have three different verification statuses:

• Pending: when the domain is waiting for verification by Quickchannel
• Verified: when the domain has been successfully verified
• Failed: when the domain has failed verification

After creating a new domain that needs verification, Quickchannel attempts to verify it for 2 weeks, and then verification fails.

All domains will be listed at the bottom of the page, along with their current verification status.

Verified domains are periodically re-verified to ensure the DNS record remains set. If that verification fails, then the domain is set to pending, and the standard verification process starts.

Unverified domains are not active.