Domain Management

Common Identity helps organizations prove they own certain domains. Organizations can verify a domain and claim ownership of it. Verifying a domain ensures that a user in a given organization belongs to that specific domain. You can verify domains in three steps:

1. Get a verification token using the GetToken API.

2. Add the received verification token as a TXT record for the specific domain to your DNS server.

3. Call the CI API to verify domain ownership.

4. After verification, you can claim the domain using the Claim Domain API.

If you need to release previously claimed domains, you can use the Unclaim Domain API. This API lets an organization give up its claim on a domain, so the domain won't be marked as 'claimed' by that organization anymore. However, releasing a claim doesn't change the verification status of the domain. Even after being unclaimed, the domain stays verified, showing that its ownership and control were successfully validated during the original verification process.

If you want to remove both the claim and the verification status, you'll need to use a different API. To unverify domains for the organization, you can use the Unverify API. This API invalidates the domain’s verification, meaning the domain is no longer considered verified by the system.

Note:

For unclaiming a domain, use the Base64-encoded value in the request body. You can use any online tool for the encoding. For example, if you are unclaiming the domain abc@cisco.com, you should encode it to get the Base64 value YWJjQGNpc2NvLmNvb and use this value in the request body to unclaim the domain.