1️⃣ Introduction
👉 Why do I need to validate the ownership of my domain ?
By verifying that you own the domain, we ensure that only authorized individuals can conduct phishing simulations for your organization. This prevents potential misuse of our platform and protects your employees from unauthorized tests.
👉 Where can I validate my domains ?
In the Settings, click on the Domains tab and then on ‘Verify domain'
2️⃣ How do I validate my domain ?
👉 Step 1: Validate that my domain name belongs to me
I select my generic email address
I use the DNS method
👉 Step 2: Filter RIOT phishing emails
I use the API method
👍 Why you should prefer the API method ?
The API method allows attacks to pass directly into the user's mailbox. This will be less time-consuming than the manual method, which will require whitelisting of all domain names as well as whitelisting in your anti-antispam if necessary.
NB: If you don't have Microsoft or Google, you'll have to use the manual method.
I use the Manual method:
You will need to validate all the domains manually. You can find the step by step process in those articles :
Microsoft
Google
👉 Step 3 : Authorise Riot on your external tools (if necessary)
If you're using an external anti-spam, you'll need to validate Riot to make sure the domains get through.
👉 Step 3bis : Validate the Whitelist
In order to test that the whitelisting has been validated correctly, you will need to send a test email to an admin.
💡 Perequisite : In order to be able to select the admin, the admin's email address will necessarily have to be an address linked to the domain name to be validated.
For example: If I want to validate the address ‘[email protected]’, I must have an admin on my platform registered with an email address of type ‘[email protected]’.
However, if I don't see an admin in the drop-down menu, I can add an admin via the Settings > Members tab.