Domain Mapping for Federated Authentication
Improvements to Domain Mapping for Federated Authentication.
1. Update the documentation (https://www.mongodb.com/docs/atlas/security/manage-domain-mapping/) to clearly state if the TXT/HTML record should persist or if they can be deleted after a domain has been verified.
2. If the record has to persist, consider changing the name of the key. TXT records are public and can be used by security researchers to map all companies using Atlas by looking for TXT records with "mongodb-site-verification".
1
vote
![](https://secure.gravatar.com/avatar/85a087e8cd53803202472e8bd5ee694e?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)