Configure new domains in Apple Business Manager
To use Managed Apple IDs in Apple Business Manager, you must first verify the domains you want to use. This process ensures that your organization is the one that has authority to modify the domain name service (DNS) records for your domain. For example, if you wanted to use example.com as your domain, you would need to add a specific TXT record to your domain name server’s zone file within 14 calendar days of beginning the verification process. If your domain can’t be verified, additional steps must be taken to resolve which organization is associated with a disputed domain name.
When you create Managed Apple IDs using a specific domain, you must first prove to Apple that your organization claims that domain. You must also prove your ownership before federating a domain. If you already have federated authentication configured, verify your domain as soon as possible.
The status of a domain is indicated by the following icon colors:
Red: Domain verification failed
Yellow: The domain has not been successfully verified
Gray: The domain has been verified but federated authentication has not been configured
Green: The domain has been verified and can be used with federated authentication
Steps to add a new domain
There are two main steps to link Apple Business Manager to Azure AD:
Add a domain.
Complete verification for your new domain.
Add a domain
In Apple Business Manager , sign in with an account that has the role of Administrator or People Manager.
Click Settings at the bottom of the sidebar, then click Accounts below Organization Settings.
Click Edit in the Domains section, then click Add Domain.
Add the domain you want to use, then click Continue.
Click Verify next to the domain.
You will see a TXT record and receive an email saying that the domain you selected is now attempting to be verified. You have 14 calendar days to complete the verification process.
If you are using one of the following services, see their documentation for pasting a TXT record into a zone file or contact your DNS administrator:
GoDaddy: Add a TXT record
Microsoft Azure: Add a TXT record for verification
Network Solutions: Managing Advanced DNS Records
NameCheap: How do I add TXT record for my domain?
If you have a different domain registrar, contact them for information on how to add a TXT record to your DNS zone file. After the TXT record is added, complete the task “Finalize the verification process.”
Note: Only domains that haven’t been claimed by another organization can be added. Contact the organization directly that has claimed the domain you want to use. For more information about domain disputes, see About domain conflicts.