---
title: "Verify SSO domains"
method: POST
path: "/v1/sso-connections/{id}/verify-domains"
tags: ["sso-connections"]
---

# Verify SSO domains

`POST /v1/sso-connections/{id}/verify-domains`

## Request

- Base URL: `https://api.brixsignage.com`
- URL: `https://api.brixsignage.com/v1/sso-connections/{id}/verify-domains`
- Auth: HTTP bearer

Verifies an SSO connection's email domains using a DNS TXT record lookup. Verified domains control whether the connection is offered at sign-in and whether cross-workspace sign-in is allowed for that domain.

**Notes.**
- Answers 200 with `verified: false` when a domain fails; the connection stays unverified.

## Path parameters

- `id` string, required

## Response `200`

Success.

- object
  - `data` object, required
    - `verified` boolean, required: True only when every domain proved out.
    - `results` object[], required
      - `domain` string, required
      - `ok` boolean, required
      - `reason` string: Why a domain failed: `claimed_by_another_workspace`, `dns_<status>`, or a lookup error. Absent when the lookup answered.
    - `verifiedAt` string, nullable, required: ISO-8601 timestamp (UTC).

## Other responses

- `401`: Missing, expired or revoked bearer token.
- `403`: You do not hold the permission for the whole workspace (a grant at one location, or in a franchise workspace, is not enough).
- `404`: No such connection in this workspace.
- `422`: `no_domains`: the connection has no email domains.
- `5XX`: Server error. The body carries a `requestId` to quote to support.

---

[API](https://skmtc.dev/brixsignage/apis/brix-api.md) · [All operations](https://skmtc.dev/brixsignage/apis/brix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/brixsignage/apis/brix-api/revisions/02fd3665dc7d?raw)