# Domains, single sign-on and the audit log

These settings are for an organization's owners and admins: only they see them under the organization's
**Settings**.

## Verify a domain

Prove that your organization owns an email domain by publishing a DNS record. A domain can be verified by one
organization at a time.

1. Open **Domains**, enter the domain, and press **Add domain**.
2. Publish the record its page shows at your DNS provider.
3. Check it from the domain's page. Once Uremot finds the record, it verifies the domain.

To stop, open the domain and press **Remove**.

## Single sign-on

Single sign-on lets people sign in with your company's identity provider, over OIDC or SAML. Sign-in sends anyone with an
address at your verified domains to that provider. They join your organization when you invite them, or on their first sign-in
if you turn that on.

We turn single sign-on on for an organization on request: write to support@uremot.com. Then, under
**Single sign-on**, set up the connection to your identity provider, test it with the test link, and press
**Activate**. **Deactivate** turns it off again.

## The audit log

The **Audit log** records what was done in your organization and by whom, on the Team plan. Filter it by time, by
who did it, including **Uremot** and **Uremot staff**, and by action. On another plan the page says what it needs,
with **See plans**.