---
title: "Sso Lookup"
method: POST
path: "/api/auth/lookup"
tags: ["Authentication"]
---

# Sso Lookup

`POST /api/auth/lookup`

## Request

- Base URL: `https://api.thebetterhire.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebetterhire.ai/api/auth/lookup`
- Auth: none declared

Does this email's domain have SSO configured? (login-page probe).

Public and unauthenticated by design — it runs before login. Replaces the
direct-DB Next.js route (API proxy sweep); response shape and error
strings preserved verbatim. Only VERIFIED domains on ACTIVE orgs with an
ENABLED config answer true, so the probe can't be used to enumerate
unverified/disabled tenant state.

## Request body

- LookupRequest: Pre-login SSO discovery — deliberately NOT EmailStr: the FE contract returns specific 400 strings for malformed input, not a 422 list.
  - `email` string

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thebetterhire/apis/interanalysis-b2b-api.md) · [All operations](https://skmtc.dev/thebetterhire/apis/interanalysis-b2b-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebetterhire/apis/interanalysis-b2b-api/revisions/c8ad03e900ea?raw)