SingleSign Business

Getting started as a business

Everything the wizard asks for, the DNS records it needs, where to add them at the common registrars, and what happens by itself once you have.

About Business

Before you start

What you need

A domain you control

yourcompany.com, registered to you, with access to wherever its DNS records are managed — usually the registrar (Cloudflare, GoDaddy, Namecheap, Route 53, Squarespace and the like). Not a Gmail domain, and not singlesign.com.

About ten minutes

Naming the company, adding one TXT record and picking your address takes a few minutes. The rest is waiting on DNS — usually minutes, sometimes longer — and we email you when each step is done, so you can close the page.

Who you will invite

The email addresses of the people who should get a company mailbox. They sign in with SingleSign — no passwords to hand out — and you give each of them their @yourcompany.com address from the console once they are in.

Step by step

The wizard, screen by screen

Sign in at email.singlesign.com and choose “Set up your organization”. The five steps below are the wizard’s progress rail; the labels in the boxes are the ones on screen.

1
Company
Name your company
Sign in with SingleSign and type your company or organization name. Your organization gets a free address right away — acme.singlesign.com, editable, checked as you type — so nobody has to wait for DNS. One identity can own several organizations, and a personal @singlesign.com address stays yours.
- Set up your organization
- Company or organization name
- Your free address
- Create organization
2
Domain
Connect your own domain (optional)
Optional — skip it and add it any time from the organization’s Domains section. Add one TXT record where you manage the domain’s DNS. We check for it on our own, the step moves on by itself the moment the record is found, and you can close the page — we email you when it’s verified. Most providers publish within minutes; DNS can take up to 72 hours.
- Your company domain
- Add domain
- Verify ownership
- Verify
3
Your address
Pick your company address
Choose the part before the @ on your free SingleSign address or a verified domain of your own. This creates your own company mailbox — its own inbox, storage and calendar, separate from any personal mail — and opens it right there.
- Your address
- Create my mailbox
4
Invite
Invite people
Each invite emails a join link. People sign in with SingleSign — no passwords to hand out — and you give them their company mailbox from the organization console once they are in. Skipping is always fine; you can invite anyone later.
- Email addresses
- Send invites
- Skip for now
5
Done
Open your inbox
Your organization is ready. The mail records (MX, SPF, DKIM, DMARC) come next in the Domains section of the console — we check them on our own and email you the moment mail is live.
- Open your inbox

DNS records

The five records, and where to add them

The ownership record comes first; the four mail records follow once the domain is verified. The console shows every value for your domain with a copy button — this table is the same list, so you know what to expect.

The DNS records an organization domain needs
Record	Type	Host	Value	What it does
Ownership	TXT	@	`singlesign-site-verification=…` The console shows the exact token for your domain — copy it from there. It only proves you own the domain; nothing about your mail changes yet.	Proves you control the domain.
MX	MX	@	`10 email.singlesign.com.` Priority 10. Remove any other MX record, or mail keeps going to the old provider.	Delivers mail for the domain to SingleSign.
SPF	TXT	@	`v=spf1 include:_spf.singlesign.com ~all` A domain gets one SPF record. If one exists, add include:_spf.singlesign.com to it instead of creating a second.	Tells receivers that SingleSign may send for the domain.
DKIM	TXT	ss1._domainkey	`v=DKIM1; k=rsa; p=…` The key is generated for your domain and shown in the console once ownership is verified. It is long — most providers split it into 255-character pieces on their own.	Signs the mail you send so receivers can trust it.
DMARC	TXT	_dmarc	`v=DMARC1; p=none; rua=mailto:dmarc-reports@yourcompany.com` Use your own domain in the rua address; the console shows the exact value. The reports come to your organization.	Tells receivers how to treat mail that fails the checks; reports come to this organization.

Host “@” means the domain itself. Some providers want the bare domain (yourcompany.com) there instead, and some fill it in for you. Never type the domain twice — “ss1._domainkey.yourcompany.com” in a field that already appends yourcompany.com is the most common mistake, and the console calls it out.
The DKIM value is longer than 255 characters. Most providers split it into pieces on their own when you paste it; Route 53 needs you to split it (see below).
Mail moves when the MX record does. Until you point MX at email.singlesign.com, your current provider keeps receiving mail — verify ownership and add the other records first, then switch when you are ready.

Registrar quick guides

Where the DNS page is, what goes in the Host field, and how each one takes the long DKIM value. The full walkthroughs live in Domains and DNS records.

Cloudflare

Where: Dashboard → your domain → DNS → Records → Add record.
Host: Type @ in the Name field for the domain itself (Cloudflare shows it as your domain name); ss1._domainkey and _dmarc go in as written. MX and TXT records are never proxied — leave them DNS only.
Long values: Paste the whole DKIM value. Cloudflare splits it into 255-character pieces on its own.

GoDaddy

Where: My Products → Domains → your domain → DNS → Add New Record.
Host: Use @ as the Name for the domain itself. For the MX record the Value is email.singlesign.com and the Priority is 10.
Long values: Paste the whole DKIM value. GoDaddy keeps a long TXT value in one field.

Namecheap

Where: Domain List → Manage → Advanced DNS → Host Records → Add New Record.
Host: Use @ as the Host for the domain itself. For the MX record, switch Mail Settings to Custom MX first, then add email.singlesign.com with priority 10.
Long values: Paste the whole DKIM value. Namecheap splits a long TXT value on its own.

Route 53

Where: Hosted zones → your zone → Create record.
Host: Leave the Record name empty for the domain itself (the zone name fills it in); for DKIM and DMARC enter ss1._domainkey and _dmarc as the subdomain.
Long values: Route 53 does not split long values for you: wrap the DKIM value in double quotes and break it into pieces of at most 255 characters, each in its own quotes, separated by a space.

Squarespace

Where: Domains → your domain → DNS → DNS Settings → Custom records → Add record.
Host: Use @ as the Host for the domain itself.
Long values: Paste the whole DKIM value. Squarespace accepts a long TXT value in one field.

Afterwards

What happens by itself

Once the records are in, there is nothing to click. We check, we email, and the console and the checklist move on their own.

Verification happens on its own

Once the ownership record is added, the wizard’s Domain step moves on by itself the moment the record is found. We check every few minutes; after three days we keep checking hourly and never give up on a domain.

The e-mails you receive

“yourcompany.com is verified — now add the mail records” arrives with the exact MX, SPF, DKIM and DMARC values for your domain. “Mail is live for yourcompany.com” arrives once a signed test message from postmaster@yourcompany.com has made the round trip. Later, “yourcompany.com: the MX record needs attention” tells you if a record that was fine goes missing — nothing is suspended, and we pick it up again when it is back.

The checklist

The organization setup card beside your inbox tracks it: “yourcompany.com — 2 of 4 mail records set up”, how many members have joined and how many have a company mailbox. Each row links to the console section that finishes it.

Mail is live

When every record checks out and the test message came back verified, the Domains section shows “Mail is live for yourcompany.com”, the checklist row reads “mail is live ✓”, and you can give everyone their company address.

Help center

The SingleSign Business articles, one per topic.

Or start at the hub: SingleSign Business help.