What happens to users with email addresses on my managed domain who are already on Zoom accounts?

Zoom will prompt these users to convert to your account. They can choose to join or leave their existing account and join yours upon authentication.

Can I add multiple domains to my managed domain list?

Yes, you can add multiple domains. Zoom allows you to manage various domains under a single account for centralized administration.

How do I verify a domain after adding it to the managed domain list?

You'll typically verify ownership by adding a specific TXT record to your domain's DNS settings. Zoom will provide the exact TXT record and instructions during the domain setup process.

What happens if a user creates a new Zoom account with an email address from my managed domain after I've set it up?

Zoom will automatically flag the account and prompt the user to join your organization's managed account. You, as the admin, will also be notified of this new account creation.

How to set up managed domains in Zoom

Setting up managed domains in Zoom allows you to centrally manage users who sign up for Zoom using your company’s email domain. This ensures that users with your company email addresses are automatically added to your Zoom account, streamlining user management and enhancing security. To set up managed domains, you must verify your domain, then enable the setting to prompt existing and new users to join your account.

Prerequisites

A Zoom Pro, Business, Education, or Enterprise account.
Account owner or administrator privileges in Zoom.
Access to your domain’s DNS records to add a verification TXT record.
An understanding of your organization’s domain naming conventions (e.g., @example.com).

Verify Your Domain

Sign in to the Zoom web portal as an administrator.
In the navigation menu, click User Management, then click Associated Domains.
Click Add Domain.
Enter the domain name you want to manage (e.g., example.com) and click Add.
Zoom will generate a TXT record value. Copy this value. It will be needed in a future step.
Go to your domain registrar’s website (e.g., GoDaddy, Namecheap, AWS Route 53).
Sign in to your domain registrar and navigate to the DNS settings for the domain you entered in step 4.
Add a new TXT record.
- Name/Host: Enter @ or leave it blank. Some registrars may require a specific subdomain like _zoom. Consult your registrar’s documentation.
- Value/Content: Paste the TXT record value you copied from the Zoom web portal in step 5.
- TTL: Leave as default (usually 3600 seconds or 1 hour).
Save the new TXT record.
Return to the Zoom web portal.
On the Associated Domains page, find the domain you added.
Click Verify. Zoom will check for the TXT record in your DNS settings. It may take up to 72 hours for DNS changes to propagate.
If the verification is successful, the domain status will change to Verified. If verification fails, ensure the TXT record is correctly configured and try again later.

Enable Auto-Join for New and Existing Users

Sign in to the Zoom web portal as an administrator.
In the navigation menu, click User Management, then click Associated Domains.
Find the verified domain in the list.
Click the … (ellipsis) icon next to the domain.
Click Enable.
A confirmation window will appear. This window explains that when users with email addresses matching the domain sign in to Zoom, they will be prompted to join your account.
Click Enable to confirm.

Manage Existing Users

Sign in to the Zoom web portal as an administrator.
In the navigation menu, click User Management, then click Users.
You can filter the users by domain by utilizing the advanced search. In the advanced search menu, you can specify the domain and find external users.
If you don’t find an external user, the user has likely already been invited to the account. You can confirm this by checking the Pending tab, or checking user groups.
You can manually invite each user to your account, or create a user group to manage them. Refer to Managing user groups and settings for more details.

Considerations for Authentication Profiles

Authentication profiles may be configured to only allow users with email addresses matching a specific domain. Refer to Configuring authentication settings and profiles for more details.
Managed domains and authentication profiles function independently of each other. Ensure that your configuration of one does not conflict with the other.
If you are blocking users in specific domains, ensure that they are not a user with your managed domain. Refer to Blocking users in specific domains for more details.

Common Issues

Domain verification fails: Double-check that the TXT record value is exactly as provided by Zoom and that it has been added to the correct DNS settings for your domain. DNS propagation can take up to 72 hours, so wait and try again later.
Users are not prompted to join the account: Ensure that the “Enable” setting is toggled on for the verified domain in the Associated Domains section. Also, verify that the users are signing in with the email address matching the managed domain.
User already exists in another account: If a user’s email address is already associated with another Zoom account, they will need to disassociate it from that account before they can join your managed domain. They can either delete their existing account or change the email address associated with it.
Conflicting Authentication Profiles: If you have authentication profiles enabled, ensure that the settings are compatible with your managed domain settings. For example, ensure that the authentication profile isn’t blocking users from the managed domain.
Unable to edit DNS records: Contact your domain registrar’s support team for assistance with modifying DNS records if you are unsure how to do so.