Initialize domain verification (generate or rotate token)

​

Generates a fresh token for the provider and returns the TXT record the admin must publish at _gpcn-sso.<domain>. Re-calling rotates the token and invalidates the previous challenge.

Path Parameters

  • id
    Type: stringFormat: uuid
    required

Responses

  • application/json
  • 404

    Provider not found or not owned by the calling entity

Request Example for post/sso/{id}/domain-verification
curl https://api.gpcn.com/v1/sso/123e4567-e89b-12d3-a456-426614174000/domain-verification \
  --request POST

{
  "success": true,
  "data": {
    "token": "string",
    "txtRecordName": "string",
    "txtRecord": "string",
    "domain": "string",
    "domainVerified": true
  }
}

Token generated — publish the returned TXT record then call /verify

Previous
Dry-run extract of pasted SAML IdP metadata (no persistence)
Next
Verify domain ownership via DNS TXT lookup