Check the DNS record for a claimed domain
Looks up the challenge TXT record. Verification is a poll, not a command: a missing or stale record is reported
as verified: false on a 200 rather than as an error, so a client can retry while DNS propagates. Verifying
proves the organization controls the domain and nothing more; it does not change how anyone signs in.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
Unique identifier for a specific organization
[a-zA-Z0-9_-~:]+Email domain claimed for SSO
Response
Current state of the domain after checking DNS
An email domain claimed by an organization for SSO
The claimed email domain
The alias an identity provider on this domain will be given. Derived from the organization and the domain, so it is known before the provider exists, which is what lets a client show the redirect URI to register with the provider up front.
Whether control of the domain has been proven through DNS
The DNS record that proves control of the domain. Absent once the domain is verified.