---
title: "Get domain verification challenge"
method: GET
path: "/v1/sso-connections/{id}/domain-challenge"
tags: ["sso-connections"]
---

# Get domain verification challenge

`GET /v1/sso-connections/{id}/domain-challenge`

## Request

- Base URL: `https://api.brixsignage.com`
- URL: `https://api.brixsignage.com/v1/sso-connections/{id}/domain-challenge`
- Auth: HTTP bearer

Returns the DNS TXT records you must publish to prove control of the email domains used by this SSO connection. The key or person must have `settings.view` for the whole workspace.

## Path parameters

- `id` string, required

## Response `200`

Success.

- object
  - `data` object, required
    - `records` object[], required
      - `domain` string, required
      - `name` string, required: The record name: `_brix-verify.<domain>`.
      - `type` 'TXT', required
      - `value` string, required: The record value to publish: `brix-domain-verify=<token>`.
    - `verifiedAt` string, nullable, required: ISO-8601 timestamp (UTC).

## Other responses

- `401`: Missing, expired or revoked bearer token.
- `403`: You do not hold the permission for the whole workspace (a grant at one location, or in a franchise workspace, is not enough).
- `404`: No such connection in this workspace.
- `5XX`: Server error. The body carries a `requestId` to quote to support.

---

[API](https://skmtc.dev/brixsignage/apis/brix-api.md) · [All operations](https://skmtc.dev/brixsignage/apis/brix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/brixsignage/apis/brix-api/revisions/02fd3665dc7d?raw)