Domains API: Verify Email Domains for SSO - OneCLI

A verified domain proves your organization owns an email domain, such as acme.com. It is required before you can enforce SSO and lets the login page route people to your identity provider. You verify a domain by publishing a DNS TXT record. Each domain can belong to only one organization.

Endpoints

Endpoint	Method and path	What it does
List verified domains	`GET /org/domains`	List your organization’s email domains and whether each is verified, so you can check SSO prerequisites before enforcing sign-in.
Add a domain	`POST /org/domains`	Add an email domain and get the TXT record token to publish in DNS.
Verify a domain	`POST /org/domains/{domainId}/verify`	Verify an email domain by checking its DNS TXT record.
Remove a domain	`DELETE /org/domains/{domainId}`	Remove an email domain from your organization.

Next steps

API overview: base URLs, authentication, and pagination
Errors: status codes and the error format
Editions: which endpoints each edition serves