Workspace Domains

Workspace managers can manage first-party addresses and private customer hostnames from Workspace Settings, then Domains. The server remains authoritative for permission, domain-slot entitlement, DNS, TLS, and provider readiness.

First-party address

A valid Workspace slug may produce a server-managed first-party address. It does not consume a customer-domain slot. If routing is disabled or the slug is unavailable, canonical Workspace URLs remain the safe fallback.

Customer hostname

1. Reserve an available hostname and wait for the server to show its current state.
2. Choose Provision when the private provider is ready to accept the hostname.
3. Copy the displayed DNS verification record name and value, publish it, then choose Verify / recheck.
4. Use the status and any provider errors to resolve pending or invalid setup. Only a ready private route can receive Workspace traffic.

A DNS recheck that does not find the record is not a success; keep the domain pending and retry after propagation. Removing a hostname is subject to server safety and cleanup rules.

Separate settings

Workspace hostnames are not Project Publishing custom domains and do not prove membership or authorization. Company identity domains are managed separately under Security & Access; invitation email-domain admission is managed under Policies.