Claim an email domain for SSO
Claims an email domain and returns the DNS record that proves control of it. A claim is only a note to ourselves: nothing is registered against the domain until verification succeeds, so claiming a domain neither affects anyone’s sign-in nor stops another organization claiming it first. A domain another organization has already registered is refused with 409, before any DNS record is published.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
Unique identifier for a specific organization
[a-zA-Z0-9_-~:]+Body
Request payload for claiming an email domain for SSO
Bare email domain to claim, for example acme.com. Wildcards and public email providers are rejected.
Response
Domain claimed, pending verification
An email domain claimed by an organization for SSO
The claimed email domain
The alias an identity provider on this domain will be given. Derived from the organization and the domain, so it is known before the provider exists, which is what lets a client show the redirect URI to register with the provider up front.
Whether control of the domain has been proven through DNS
The DNS record that proves control of the domain. Absent once the domain is verified.