Domain verification

IBM requires that all email domains to be controlled by an Enterprise Federation (EF) partner must be verified. Once the proposed domain(s) is/are provided to IBM, the Enterprise Federation Specialist will initiate the domain verification process.

Note: Only verified domains may be configured into IBMid Production or IBMid Preproduction.

For an Individual Identity, when the IBMid username contains a domain specification matching a domain verified to be owned/controlled by an EF partner, the partner has the right to assert control over the ID and convert it to an Enterprise Identity.

As an example, assume “JK Enterprises” recently became an EF partner for IBMid, under the verified domain “jkenterprises.com”. One of its employees, Joe Smith, has had an IBMid for several years, prior to the company becoming an EF partner. Joe’s ID is joe.smith@jkenterprises.com.

Joe’s IBMid is currently an Individual ID and logs in to IBMid directly, using a password. However, because the ID includes “@jkenterprises.com”, his company has the right to assert control and convert Joe’s ID to an Enterprise ID. If it were to do so, Joe would then need to authenticate to the JK Enterprises identity provider for access to his IBMid.

EF partners can successfully complete the domain verification process by adding a DNS TXT record for your company’s parent domain (example: @ibm.com) by following the steps below:

Please navigate to your domain registrar and add the DNS TXT record value provided by the Enterprise Federation (EF) Specialist you are working with.
  1. Go to the DNS records section.
  2. Add TXT record with code provided by IBMid Enterprise Federation (EF) Specialist: ("ibmid=RandomValueProvidedbyEFSpecialist”)
  3. Add the TXT record in your DNS configuration by following the instructions from your domain registrar.

Here is an example guide Domains Help

If you have any issues completing this domain verification requirement, please contact your company’s Network or IT support team.

Additionally, if there are additional domains that you want to federate with IBMid, please inform the Enterprise Federation (EF) Specialist as well.