API ReferenceDiscovery
Discovery
Resolve an identifier (email, slug, custom domain) to the organization's auth configuration -- for home-realm discovery and single-login fields.
Discovery
DiscoveryService powers home-realm-discovery (HRD) -- the moment where a user types their email on a generic login page and the UI has to decide "do we show them password / SSO / Avnology-hosted / something else?". It's a public endpoint (no auth required) because the caller cannot yet be identified.
Base URL: https://<Domain id="api"/>
Authentication: None. Rate-limited aggressively; see Rate limits.
RPCs
| Method | Path | Input |
|---|---|---|
| DiscoverByEmail | GET /v1/discovery:byEmail | [email protected] |
| DiscoverBySlug | GET /v1/discovery:bySlug | slug=acme |
| DiscoverByCustomDomain | GET /v1/discovery:byCustomDomain | Host: login.acme.com header |
Response shape
All three return a uniform envelope:
If sso_required == true, hide password/passkey UI and surface the SSO buttons only.