Skip to main content
Apple Business Manager is now Apple Business. Apple School Manager is unchanged. For more information, see Introducing Apple Business and Apple Business Manager is now Apple Business.

​
About Apple Business or Apple School Manager Domain Verification

Domain verification is a security requirement that ensures only legitimate domain owners can create Managed Apple Accounts using their domains. This process prevents unauthorized use of domains and protects against ownership conflicts.

​
How It Works

Apple Business or Apple School Manager domain verification requires you to prove ownership of your domain through DNS record verification. This process involves adding specific DNS records to your domain’s DNS settings, which Apple then verifies to confirm your organization’s ownership of the domain.

​
Why Domain Verification is Required

Before this requirement, anyone could add a domain to their Apple Business or Apple School Manager account and create Managed Apple Accounts using the domain, even if they didn’t own it. This could cause ownership conflicts and security concerns. Domain verification confirms that your organization can modify the DNS records for its domains. For more information, see the user guide for Apple Business or Apple School Manager on Apple Support.

​
Frequently Asked Questions

​
If I used the domain before the mandatory verification requirement, is it automatically verified?

No. A domain used before the verification requirement is not exempt. You still need to complete the verification process.

​
What if more than one organization is using the domain?

If multiple organizations use the domain associated with your Managed Apple Accounts, each organization can independently verify it. However, only one organization can federate the domain. Other organizations must move their Managed Apple Accounts to another verified domain. Otherwise, they may receive error messages such as “Managed Apple Account ending with this domain name is not allowed.”

​
How soon do I have to verify the domain?

You must verify the domain associated with your Managed Apple Accounts within 14 calendar days of selecting Verify in Apple Business or Apple School Manager.

​
Why did I get an email asking me to verify ownership of my domain?

If you get an email asking you to verify your domain, another organization has claimed a domain that your Managed Apple Accounts currently use. You must verify domain ownership within 14 days of receiving the email.

​
What if I can’t or don’t want to verify the domain?

You must move the Managed Apple Accounts that you aren’t verifying to a reserved domain or a different verified domain. Otherwise, you may receive error messages such as “Managed Apple Account ending with this domain name is not allowed.” A reserved domain is the default domain that appears under Accounts. It combines the name your organization enrolled in Apple Business or Apple School Manager with a number, such as Iru Endpoint1.appleid.com.

​
Verifying Domains Associated with Your Apple Business or Apple School Manager Account

1

Add, link, or verify domains

Follow Apple’s guide to add, link, or verify domains in the service you use: Add and verify a domain in Apple Business or Add and verify a domain in Apple School Manager.

​
Considerations

  • DNS Access Requirements: Ensure you have administrative access to your domain’s DNS settings to add verification records
  • Verification Timeline: Complete domain verification within 14 days of initiating the process to avoid service disruption
  • DNS records and account security: Apple must be able to resolve your verification records on the public internet. Publish only the record types, names, and values Apple provides for verification. Do not add unrelated sensitive data to those records. Restrict and monitor access to your DNS provider accounts (least privilege, MFA, and change alerts), because anyone who can edit your DNS can disrupt verification or compromise your domain.
  • Multiple Organizations: Coordinate with other organizations using the same domain to prevent conflicts
  • Reserved Domains: Understand that reserved domains (like Iru Endpoint1.appleid.com) are available as fallback options
  • Federation Limitations: Only one organization can federate a domain, even if multiple organizations verify it
  • Error Prevention: Verify domains before creating large numbers of Managed Apple Accounts to avoid migration issues
  • Testing: Test domain verification in a controlled environment before production deployment
  • Backup Planning: Have alternative domain options ready in case primary domain verification fails
  • Migration Planning: Plan for potential Managed Apple Account migrations if domain verification is not possible
  • Documentation: Keep records of verification processes and DNS record configurations
  • Monitoring: Regularly monitor domain verification status and renewal requirements
  • Support: Contact Apple Support if you encounter issues with the verification process
  • Compliance: Ensure domain verification aligns with your organization’s security and compliance requirements