Standard Operating Procedure (SOP)
Tenant Custom Domain Onboarding Guide for Shop-E-Business
Architecture Overview:
This battle-tested checklist provisions edge SSL and seamless
This battle-tested checklist provisions edge SSL and seamless
www forwarding for store owners. It consumes only 1 Custom Hostname quota per tenant on your primary SaaS tier by handling www redirects directly at the edge of the customer zone.Phase 1: Database Registration
Step 1: Assign the Apex Domain in Your Database
Add the domain mapping into your Shop-E-Business database or tenant management dashboard.
Crucial Rule:
Only register the clean apex domain string (example: shasroibazar.com).
Do NOT include:
Only register the clean apex domain string (example: shasroibazar.com).
Do NOT include:
www.https://or trailing slashes (/)
Phase 2: Tenant DNS Configuration
Open the DNS manager for the customer's domain (e.g., shasroibazar.com in Cloudflare, Namecheap, or GoDaddy).
Step 2: Route the Root Apex Domain
| Type | Name | Target / Content | Proxy Status |
|---|---|---|---|
| CNAME | @ (or shasroibazar.com) |
www.shopebusiness.com |
Proxied (Orange Cloud) |
Step 3: Route the WWW Subdomain
| Type | Name | Target / Content | Proxy Status |
|---|---|---|---|
| CNAME | www |
www.shopebusiness.com |
Proxied (Orange Cloud) |
Why a CNAME instead of
Using a CNAME pointing to your SaaS fallback ensures that if edge redirect rules are ever paused or delayed, traffic is still safely proxied toward the SaaS origin rather than failing immediately against a dummy blackhole IP.
192.0.2.1?Using a CNAME pointing to your SaaS fallback ensures that if edge redirect rules are ever paused or delayed, traffic is still safely proxied toward the SaaS origin rather than failing immediately against a dummy blackhole IP.
Phase 3: Cloudflare for SaaS Hostname Registration
Step 4: Register Apex Custom Hostname
- Log into Cloudflare and select your platform domain: shopebusiness.com.
- Navigate to: SSL/TLS → Custom Hostnames.
- Click Add Custom Hostname.
- Custom Hostname: shasroibazar.com (apex only).
- Certificate Validation Method: Choose HTTP Validation.
- Origin Server: Default origin server.
- Click Add Custom Hostname.
Why HTTP Validation over TXT?
TXT validation often experiences timeout drops ("Timed Out Validation (TXT)") and requires tedious manual token copying. Because the customer's CNAME already points to your platform, Cloudflare completes HTTP-01 verification and provisions edge certificates automatically within 1–2 minutes without manual DNS interventions.
TXT validation often experiences timeout drops ("Timed Out Validation (TXT)") and requires tedious manual token copying. Because the customer's CNAME already points to your platform, Cloudflare completes HTTP-01 verification and provisions edge certificates automatically within 1–2 minutes without manual DNS interventions.
Phase 4: Setup WWW Edge Redirect (Zone-Specific)
Zone Warning:
Do NOT create this rule inside
Do NOT create this rule inside
shopebusiness.com! You must switch the Cloudflare dashboard to the customer’s own domain zone (e.g., shasroibazar.com).Step 5: Create the Forwarding Rule
- In the Cloudflare dashboard, select the customer’s domain zone: shasroibazar.com.
- Go to Rules → Page Rules (or Redirect Rules).
- Click Create Page Rule.
- URL Match:
www.shasroibazar.com/*
- Select:
- Setting: Forwarding URL
- Status Code: 301 - Permanent Redirect
- Destination URL:
https://shasroibazar.com/$1
- Click Save and Deploy.
Result: Using this edge rule prevents burning a second Custom Hostname slot, conserving your 100 free SaaS hostname quota so 1 client = 1 quota.
Phase 5: Enforcement & Final Testing
Step 6: Enforce "Always Use HTTPS"
- Still inside the customer's domain dashboard (shasroibazar.com), open SSL/TLS → Edge Certificates.
- Toggle Always Use HTTPS to ON.
Step 7: Verification Checklist
- In your SaaS dashboard (shopebusiness.com), verify that
shasroibazar.comdisplays:- Certificate Status: Active
- Hostname Status: Active
- Open a fresh Private/Incognito browser window and test:
https://shasroibazar.com→ Loads the tenant store with a valid SSL padlock.http://shasroibazar.com→ Automatically upgrades to secure HTTPS.https://www.shasroibazar.com→ 301-redirects instantly to the apex domain without certificate mismatch errors.
Production Architecture Validated 🚀
Zero manual TXT tokens, automated renewal via HTTP-01, and 1-hostname-per-tenant quota efficiency.