# Domain validation with multiple managed clients **URL:** \ **Category:** App Marketplace\ **Created:** [April 23, 2020, 5:35am UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542 "2020-04-23T05:35:54Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![huon](https://avatars.discourse-cdn.com/v4/letter/h/db5fbb/32.png) [@huon](https://devforum.zoom.us/u/huon)\ **Post date:** [April 23, 2020, 5:35am UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/1 "2020-04-23T05:35:54Z")
We are adding Zoom integration to our semi-SaaS app. We have multiple clients, each with their own deployment, including a unique domain. These domains start as something generic, like ..com, but eventually get switched to a vanity domain like ..edu Which brings me to the two problems we have. For examples I will assume our company is “company” and the client is “school”. We already know we need one app per client. 1. If I configure the app and all domains as [school.company.com](http://school.company.com), and validate the domain, and then the client later changes to the vanity domain portal.school.edu, and we update OAuth redirect URLs, will we need to re-validate the domain? 2. Our help centre, privacy policy, and terms of use are all hosted on a single domain that our company owns (e.g. [company.io](http://company.io)), which is different to the domain of all our clients. Is the only solution to this to set up redirects? Can you also tell me how long domain validation by email takes, and what constitutes as proof of ownership? Given our situation and our development/deployment workflow, putting a unique file at the root of each domain is not practical (especially if we need to re-validate for vanity domains). ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 23, 2020, 5:52pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/2 "2020-04-23T17:52:45Z")
Hey @huon, > [@huon](#): > > If I configure the app and all domains as [school.company.com](http://school.company.com), and validate the domain, and then the client later changes to the vanity domain portal.school.edu, and we update OAuth redirect URLs, will we need to re-validate the domain? I suggest handling the redirects on your end instead of adding all the redirect URLs into Zoom. Only use your company domains for OAuth, and then use the [state query param](https://marketplace.zoom.us/docs/guides/auth/oauth#getting-access-token) to know which of the clients is installing the app, and once they land on your company redirect url, read the state query param in the url and redirect back to the client site. > [@huon](#): > > Our help centre, privacy policy, and terms of use are all hosted on a single domain that our company owns (e.g. [company.io](http://company.io)), which is different to the domain of all our clients. Is the only solution to this to set up redirects? I think my post above might answer your question. 🙂 > [@huon](#): > > Can you also tell me how long domain validation by email takes, and what constitutes as proof of ownership? Given our situation and our development/deployment workflow, putting a unique file at the root of each domain is not practical (especially if we need to re-validate for vanity domains). We can simply validate the domain via a dns txt file. Please reach out to [developersupport@zoom.us](mailto:developersupport@zoom.us) for instructions. Thanks, Tommy ---
**Author:** ![huon](https://avatars.discourse-cdn.com/v4/letter/h/db5fbb/32.png) [@huon](https://devforum.zoom.us/u/huon)\ **Post date:** [April 23, 2020, 10:24pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/3 "2020-04-23T22:24:31Z")
Thanks Tommy, it’s good to know we can use DNS TXT records for validation, that will make it much easier. Will reach out soon. I assume “[developersupport.zoom.us](http://developersupport.zoom.us)” is meant to be an email address? Regarding the domains and revalidation - we cannot have a single app for multiple clients, because the redirect URI needs to go to the client’s API server. We need one app per client. So when we first set up a client it would be [clientname.company.com](http://clientname.company.com) everywhere. Then they want to switch to vanity domain, and the domain (nothing else) changes to portal.clientname.edu. We would switch all the URLs in the app to use the new domain, and nothing else would change. My question now is: will we have to re-validate the domain, and assuming yes, if we already had a DNS TXT record in place, can we use the same TXT record to validate the vanity domain? EDIT: another important question - the validation code (e.g. in the HTML file) - does that ever change? If we have 10 apps, can we use the same code to validate all domains? As a point of comparison, we have the exact same setup for Microsoft / Azure OAuth integration, however they do not need domain validation. ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 24, 2020, 4:22pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/4 "2020-04-24T16:22:20Z")
Hey @huon, > [@huon](#): > > Will reach out soon. I assume “[developersupport.zoom.us](http://developersupport.zoom.us)” is meant to be an email address? Yes, apologies: [developersupport@zoom.us](mailto:developersupport@zoom.us) 🙂 > [@huon](#): > > My question now is: will we have to re-validate the domain, and assuming yes, if we already had a DNS TXT record in place, can we use the same TXT record to validate the vanity domain? Okay, you will have to have multiple OAuth apps then. You can confirm this with [developersupport@zoom.us](mailto:developersupport@zoom.us) during the app review process. > [@huon](#): > > the validation code (e.g. in the HTML file) - does that ever change? If we have 10 apps, can we use the same code to validate all domains? Yes, it is unique to each OAuth app. Thanks, Tommy ---
**Author:** ![huon](https://avatars.discourse-cdn.com/v4/letter/h/db5fbb/32.png) [@huon](https://devforum.zoom.us/u/huon)\ **Post date:** [April 24, 2020, 10:32pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/5 "2020-04-24T22:32:29Z")
> [@tommy](#): > > > [@huon](#): > > > > the validation code (e.g. in the HTML file) - does that ever change? If we have 10 apps, can we use the same code to validate all domains? > > Yes, it is unique to each OAuth app. This is confusing, and the “yes” contradicts the rest of your sentence. What I have noticed so far is that the validation code stays the same, even across apps. But what I really want to know, and I didn’t get an answer to, is if we have an app that has been fully published, and then want to change the domain of all URLs - what happens? Do we have to get a re-review? Validate the new domains? Note that nothing is changing except the domain. ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 27, 2020, 5:47pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/6 "2020-04-27T17:47:34Z")
Hey @huon, > [@huon](#): > > This is confusing, and the “yes” contradicts the rest of your sentence. > What I have noticed so far is that the validation code stays the same, even across apps. They are in fact different for each domain name that you are validating in your apps. Are you seeing the same code across OAuth apps that have the same domain names? > [@huon](#): > > But what I really want to know, and I didn’t get an answer to, is if we have an app that has been fully published, and then want to change the domain of all URLs - what happens? You will need to submit an update request for our App Marketplace team to review. Yes, you will have to validate the new domains. Thanks, Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 8:56pm UTC](https://devforum.zoom.us/t/domain-validation-with-multiple-managed-clients/14542/7 "2020-08-21T20:56:34Z")
Closed on August 21, 2020, 8:56pm UTC