---
title: "Verify Team Sso Domain"
method: POST
path: "/api/v1/teams/{team_id}/sso/domains/{domain}/verify"
tags: ["sso"]
---

# Verify Team Sso Domain

`POST /api/v1/teams/{team_id}/sso/domains/{domain}/verify`

## Request

- Base URL: `https://api.badgeia.com`
- URL: `https://api.badgeia.com/api/v1/teams/{team_id}/sso/domains/{domain}/verify`
- Auth: none declared

Prove a claimed domain by its DNS TXT record (security F1).

Owner only, Enterprise plan, in the auth rate bucket. 409 (readable) when the
record is not there yet; the claim stays pending.

## Path parameters

- `team_id` string, uuid, required
- `domain` string, required

## Response `200`

Successful Response

- SsoConfigRead
  - `team_id` string, uuid, required
  - `configured` boolean, required
  - `provider` 'saml' | 'google', nullable
  - `saml` SamlConfigRead
    - `idp_entity_id` string, required
    - `sso_url` string, required
    - `slo_url` string, nullable, required
    - `x509_certs` string[], required
    - `certificates` SsoCertificateRead[], required
      - `fingerprint_sha256` string, required
      - `subject` string, required
      - `not_after` string, date-time, required
    - `name_id_format` 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' | 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent' | 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', required
    - `want_assertions_signed` boolean
  - `google` GoogleConfigRead
    - `allowed_domains` string[], required
  - `sso_only` boolean
  - `default_role` 'member' | 'viewer'
  - `domains` SsoDomainRead[]
    - `domain` string, required
    - `verified` boolean, required
    - `verification` SsoDomainVerificationRead, required: The DNS record that proves the domain (security F1).
      - `record_name` string, required
      - `record_type` 'TXT'
      - `record_value` string, required
  - `updated_at` string, date-time, nullable
  - `members_without_password` integer
  - `service_provider` SsoServiceProviderRead, required: What the IdP administrator copies into their IdP.
    - `entity_id` string, required
    - `acs_url` string, required
    - `metadata_url` string, required
    - `google_redirect_uri` string, nullable, required
  - `plan_allows_sso` boolean, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/badgeia/apis/badge.md) · [All operations](https://skmtc.dev/badgeia/apis/badge/llms.txt) · [OpenAPI document](https://skmtc.dev/badgeia/apis/badge/revisions/7e7f7fee8b77?raw)