[{"data":1,"prerenderedAt":323},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims":105,"docs-surround-\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims":318},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,79,89,99],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70,71,75],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74},"Your CobraSphere systems","\u002Fen-gb\u002Fproducts\u002Fyour-systems","en-gb\u002Fproducts\u002F1.your-systems",{"title":76,"path":77,"stem":78},"Enterprise Manager","\u002Fen-gb\u002Fproducts\u002Fenterprise-manager","en-gb\u002Fproducts\u002F2.enterprise-manager",{"title":80,"path":81,"stem":82,"children":83},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[84,85],{"title":80,"path":81,"stem":82},{"title":86,"path":87,"stem":88},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":90,"path":91,"stem":92,"children":93},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[94,95],{"title":90,"path":91,"stem":92},{"title":96,"path":97,"stem":98},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":100,"path":101,"stem":102,"children":103},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[104],{"title":100,"path":101,"stem":102},{"id":106,"title":28,"body":107,"description":309,"extension":310,"meta":311,"navTitle":312,"navigation":313,"path":29,"roleNote":313,"seo":314,"sitemap":315,"stem":30,"updated":316,"__hash__":317},"docs\u002Fen-gb\u002Farchitecture\u002F4.domains-and-claims.md",{"type":108,"value":109,"toc":299},"minimark",[110,115,119,153,160,163,166,170,173,177,183,250,254,257,282,285,289],[111,112,114],"h2",{"id":113},"claiming-a-domain","Claiming a domain",[116,117,118],"p",{},"An organisation claims a domain to show that it runs it. A Domain manager, or anyone with a higher role, adds the domain. CobraSphere then gives a TXT record to publish.",[120,121,122,135],"table",{},[123,124,125],"thead",{},[126,127,128,132],"tr",{},[129,130,131],"th",{},"Record",[129,133,134],{},"Value",[136,137,138],"tbody",{},[126,139,140,148],{},[141,142,143,144],"td",{},"TXT at ",[145,146,147],"code",{},"_cobrasphere.\u003Cdomain>",[141,149,150],{},[145,151,152],{},"cobrasphere-verify=\u003Ctoken>",[116,154,155,156,159],{},"For the domain example.com the record goes at ",[145,157,158],{},"_cobrasphere.example.com",". The token is 32 random characters.",[116,161,162],{},"Only that one name is checked, never the domain itself. So the record does not clash with SPF or other TXT records at the domain, and it works for a domain that points elsewhere with a CNAME.",[116,164,165],{},"Domain names are kept in lower case, without a trailing dot. A name with accented or other non-Latin letters is kept in its punycode form.",[111,167,169],{"id":168},"one-organisation-per-domain","One organisation per domain",[116,171,172],{},"One organisation holds a domain at a time. A claim from a second organisation is refused while another organisation holds the domain. The organisation that holds a domain can hand it over, which ends its claim.",[111,174,176],{"id":175},"claim-statuses","Claim statuses",[178,179,180],"claim-states-diagram",{},[116,181,182],{},"How a claim moves between its four statuses.",[120,184,185,198],{},[123,186,187],{},[126,188,189,192,195],{},[129,190,191],{},"Status",[129,193,194],{},"What it means",[129,196,197],{},"Holds the domain",[136,199,200,213,226,238],{},[126,201,202,207,210],{},[141,203,204],{},[145,205,206],{},"PENDING",[141,208,209],{},"Added. The TXT record has not been found yet",[141,211,212],{},"No",[126,214,215,220,223],{},[141,216,217],{},[145,218,219],{},"VERIFIED",[141,221,222],{},"The record was found. The organisation holds the domain",[141,224,225],{},"Yes",[126,227,228,233,236],{},[141,229,230],{},[145,231,232],{},"FAILING",[141,234,235],{},"A later check did not find the record. The organisation still holds the domain for 14 days",[141,237,225],{},[126,239,240,245,248],{},[141,241,242],{},[145,243,244],{},"ENDED",[141,246,247],{},"Handed over, or the record stayed missing for 14 days. Kept as history",[141,249,212],{},[111,251,253],{"id":252},"checking-again","Checking again",[116,255,256],{},"The records are checked every day.",[258,259,260,264,267,273,279],"ul",{},[261,262,263],"li",{},"A verified domain is checked again once a month.",[261,265,266],{},"A failing domain is checked every day.",[261,268,269,270,272],{},"When a check fails, the claim becomes ",[145,271,232],{}," and the organisation's domain managers are told by email.",[261,274,275,276,278],{},"When the record is found again, the claim is ",[145,277,219],{}," again.",[261,280,281],{},"After 14 days of failing, the claim ends.",[116,283,284],{},"A pending claim can be removed. A claim that holds a domain, or one that has ended, cannot be removed.",[111,286,288],{"id":287},"one-domain-shared","One domain, shared",[116,290,291,292,295,296,298],{},"A claimed domain is the same domain record that ZoneAudit uses. The claim and ZoneAudit share one domain ID, so the products agree on which domain is meant. See ",[293,294,50],"a",{"href":51}," and ",[293,297,45],{"href":46},".",{"title":300,"searchDepth":301,"depth":301,"links":302},"",3,[303,305,306,307,308],{"id":113,"depth":304,"text":114},2,{"id":168,"depth":304,"text":169},{"id":175,"depth":304,"text":176},{"id":252,"depth":304,"text":253},{"id":287,"depth":304,"text":288},"How an organisation proves it runs a domain, with one DNS TXT record.","md",{},null,true,{"title":28,"description":309},{"loc":29},"2026-11-10","gOEd5cSSsUi_JNX7JnQA6Mg-AWY1abz0N9RIr7fNEGw",[319,321],{"title":24,"path":25,"stem":26,"description":320,"children":-1},"Seven roles, from Guest viewer to Owner. Each role includes every role below it.",{"title":32,"path":33,"stem":34,"description":322,"children":-1},"Which CobraSphere products a person may open.",1794661171178]