---
schema_version: "1"
id: e54576e34cbe78c133c2aff1b216b30f372032f7412198263df068214321b6da
title: Point Your Custom Domain to Your Salesforce Org
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/domain_mgmt_update_dns.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_update_dns.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 8edb4aa14d14bef06aa29beeba72bf79b98d7508b588a66feb6fdb4c78899c0e
description: Before you add a domain in Salesforce, point your domain to your Salesforce org in Domain Name Service (DNS). If your custom domain uses your HTTPS Certificate or the Salesforce content delivery network (CDN) partner, add a canonical domain name (CNAME) record for your fully qualified domain (FQDN) to DNS. The CNAME record references your Salesforce org ID and your FQDN. Then, if you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, add a second CNAME record that our CDN partner requires.
products:
  - Salesforce Platform
  - Security
release: "264"
---
# Point Your Custom Domain to Your Salesforce Org

Before you add a domain in Salesforce, point your domain to your Salesforce org in Domain Name Service (DNS). If your custom domain uses your HTTPS Certificate or the Salesforce content delivery network (CDN) partner, add a canonical domain name (CNAME) record for your fully qualified domain (FQDN) to DNS. The CNAME record references your Salesforce org ID and your FQDN. Then, if you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, add a second CNAME record that our CDN partner requires.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions.</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Applies to: Salesforce Sites and <a href="https://help.salesforce.com/s/articleView?id=experience.exp_cloud_basics_glossary.htm&amp;language=en_US" target="_blank">LWR, Aura, and Visualforce sites</a></td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d117197e78">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">To view a domain:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">
              <p>Manage Custom Domains</p>
              <p>OR</p>
              <p style="margin-bottom:0;">View Setup and Configuration</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">To add a domain:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">
              <p>Manage Custom Domains</p>
              <p>OR</p>
              <p style="margin-bottom:0;">View Setup and Configuration plus either a Site.com Publisher license or Create and Set
                Up Experiences</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">To edit or delete a domain:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d117197e78 ">Manage Custom Domains</td>

          </tr>
        </tbody>
      </table>

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_tip.png)

Tip Unfamiliar with terms like DNS, CDN, and CNAME? Want to review the difference between a DNS resolver and a certificate? See [Custom Domain Terminology](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_terms.htm&release=264.0.0&type=5 "Review the terms related to setting up a custom domain in Salesforce.").

When you add a custom domain, Salesforce checks the domain’s DNS configuration to verify that you own the domain. To meet this requirement, configure a CNAME record for your domain in DNS that points to your org. If you use the Salesforce content delivery network (CDN) or if Salesforce serves your domain with your HTTPS certificate, the CNAME record is required for your permanent custom domain configuration. If a third-party service or CDN serves your domain, the CNAME record is required for initial setup only.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_note.png)

Note If your domain serves other content via an existing A, AAAA, or CNAME record, you can’t add a CNAME record. If you update the DNS record to use the CNAME for your Salesforce org instead, your site is disrupted. To minimize that disruption, [set up a temporary non-HTTPS domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_temp_domain.htm&release=264.0.0&type=5 "Salesforce requires that you serve your custom domain via HTTPS. However, some configuration steps can require a temporary non-HTTPS configuration. If your HTTPS certificate isn’t ready to be uploaded to Salesforce, you can use a temporary domain to start configuring your custom URLs. Also, when your domain serves other content, or when you want to move a custom domain to a new production org, you can use a temporary domain to minimize disruption to your domain.") that uses a temporary TXT record in DNS to validate your ownership and configure your custom domain. Then, after you finish that configuration, update that temporary domain to your final HTTPS configuration option.

1. Get the internal Salesforce CNAME.
    
    1. To test a custom domain in a sandbox, you create the domain in production and select the sandbox as the associated org. In DNS, use the internal Salesforce CNAME for your production org.
    
    A canonical name (CNAME) record is an entry in the DNS record of a domain that points to a domain name instead of an IP address. When you add a domain in Salesforce, we verify that the domain points to your org via a CNAME record. That CNAME record has a target of your internal Salesforce CNAME, which includes your FQDN and your 18-digit Salesforce org ID.
    
    You can find your internal Salesforce CNAME and 18-character org ID at the top of the Domain Setup page.
    
    ![The Domain Setup page with the org-specific section circled.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/extend_click/images/domain_add.png)
    
    To get to this page, from Setup, in the Quick Find box, enter Domains, then select **Domains**, and then select **Add a Domain**. The option to add a domain is available only if at least one site exists in the org.
    
    This internal Salesforce CNAME is in the format `[YourFQDN].[Your18CharOrgId].live.siteforce.com`.
    
    Your domain’s fully qualified domain name (FQDN) is all the parts of the domain required to look up this authority by name unambiguously using the internet’s DNS system. For example, www.example.com.
    
    For example, to add www.example.com as a domain in a production org, if your 18-character org ID is 00d000000000000maq, your domain’s internal Salesforce CNAME is www.example.com.00d000000000000maq.live.siteforce.com.
2. If you plan to use a registrable domain to serve your site, verify that your DNS provider supports alias records or CNAME flattening. Then use the DNS vendor’s configuration system to point the domain to your internal Salesforce CNAME in DNS.
    
    A registrable domain is a top-level domain, such as example.com without the www subdomain. For more information on registrable domains, also known as root domains or naked domains, see [Custom Domain Prerequisites](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_prereqs.htm&release=264.0.0&type=5 "Before you serve your site content with a custom domain, register a domain. To get that domain ready to serve your site content, update the Domain Name System (DNS) record to point to your org. Review your site URLs for potential conflicts, and complete the prerequisites for your chosen domain configuration option.").
    
    Also note these limitations for registrable domains.
    
    - If your DNS provider doesn’t support alias records or CNAME flattening, you can’t use a registrable domain to serve your sites.
    - Salesforce is unable to serve a registrable domain via our content delivery network (CDN) partner. The Salesforce CDN only serves subdomains such as www.example.com or parts.example.com. If your site needs a registrable domain served from a CDN, host it on a CDN outside of Salesforce.
3. If you don’t plan to use a registrable domain to serve your site, work with your DNS provider to update DNS. Add a CNAME record for your fully qualified domain name that points to your internal Salesforce CNAME.
    
    Here’s an example of a CNAME record for www.example.com that points to an org with ID 00d000000000000maq.
    
    ```
    NAME               TTL   CLASS  TYPE    VALUE
    --------------------------------------------------
    www.example.com.   3600  IN     CNAME   www.example.com.00d000000000000maq.live.siteforce.com.
    ```
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_note.png)
    
    Note If Cloudflare is your DNS provider and you plan to use the Salesforce CDN, set the proxy status of the CNAME records to **DNS only** in your Cloudflare account. If you set the records to **Proxied**, settings in your Cloudflare account apply before traffic reaches the Salesforce CDN.
4. If you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, get the target value for your domain’s \_acme-challenge CNAME record.
    
    1. In Setup, enter Domains in the Quick Find box, and then select **Domains**, and then add or edit a domain.
    2. Select **Serve the domain with the Salesforce Content Delivery Network (CDN)** as the Domain Configuration Option.
    
    The details for that option include the format of the \_acme-challenge CNAME record.
    
    ![Domain page with the section that lists the format for the CNAME records.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/extend_click/images/salesforce_cdn_acmechallenge2.png)
    
    To get the values for your domain, replace \[domain\] with your FQDN. The full format for the \_acme-challenge name is: \_acme-challenge.\[YourFQDN\], and the format for the target value is \_acme-challenge.\[YourFQDN\].\[Your18charOrgId\].live.siteforce.com.
5. If you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, work with your DNS provider to add your domain’s \_acme-challenge CNAME record.
    
    This CNAME record, referred to as the \_acme-challenge, is for your domain’s certificate. The first CNAME record that you added is for your domain, pointing to your internal Salesforce CNAME. Both CNAME records are required for the Salesforce CDN.
    
    ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_important.png)
    
    Important If other TXT records exist in DNS for your domain’s \_acme-challenge subdomain, remove them before you provision your domain.
    
    Here’s an example \_acme-challenge CNAME record for www.example.com that points to an org with ID 00d000000000000maq.
    
    ```
    NAME                               TTL   CLASS  TYPE    VALUE
    --------------------------------------------------
    _acme-challenge.www.example.com.   3600  IN     CNAME   _acme-challenge.www.example.com.00d000000000000maq.live.siteforce.com.
    ```
6. Verify the CNAME record values.
    
    1. On Windows, open Command Prompt, then enter `nslookup -type=recordtype domain`, where domain is the domain name you intend to use as your custom domain, such as www.example.com.
    2. On MacOS or Linux, open Terminal, and then enter `dig -t recordtype domain`, where domain is the domain name you intend to use as your custom domain, such as www.example.com.
    
    If the returned CNAME values are incorrect or missing, work with your hosting provider to update the CNAME records.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_note.png)
    
    Note Some hosting providers’ configuration options can modify the CNAME value and prevent Salesforce from verifying ownership of that domain. For example, if Cloudflare is your DNS provider, set the proxy status of the CNAME records to **DNS only**. The **Proxied** option can prevent Salesforce from verifying the CNAME.

#### See Also

- [Custom Domains](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt.htm&release=264.0.0&type=5 "Provide a branded experience for users who access your external-facing Salesforce content by serving your Digital Experiences or Salesforce Sites on a domain that you own, such as https://www.example.com.")
- [Custom Domain Prerequisites](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_prereqs.htm&release=264.0.0&type=5 "Before you serve your site content with a custom domain, register a domain. To get that domain ready to serve your site content, update the Domain Name System (DNS) record to point to your org. Review your site URLs for potential conflicts, and complete the prerequisites for your chosen domain configuration option.")
- [Use a Temporary Non-HTTPS Domain to Serve Your Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_temp_domain.htm&release=264.0.0&type=5 "Salesforce requires that you serve your custom domain via HTTPS. However, some configuration steps can require a temporary non-HTTPS configuration. If your HTTPS certificate isn’t ready to be uploaded to Salesforce, you can use a temporary domain to start configuring your custom URLs. Also, when your domain serves other content, or when you want to move a custom domain to a new production org, you can use a temporary domain to minimize disruption to your domain.")