# Self-service SSO connection does not return options.domain\_aliases

**URL:** <https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963>\
**Category:** Get Help\
**Tags:** oidc-enterprise-connection, connections\
**Created:** [March 9, 2026, 4:07pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963 "2026-03-09T16:07:09Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![nathan.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nathan.johnson/32/71938_2.png) [@nathan.johnson](https://community.auth0.com/u/nathan.johnson)\
**Post date:** [March 9, 2026, 4:07pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/1 "2026-03-09T16:07:09Z")

</div>

Hi

I am struggling with getting access to the domain aliases for a given self-service SSO connection. I’m configuring using an Okta Workforce connection an I am following the docs here:

> **[​Email domain verification and pre-verified domains - Manage Self-Service SSO -...](https://auth0.com/docs/authenticate/enterprise-connections/self-service-SSO/manage-self-service-sso#email-domain-verification-and-pre-verified-domains)**
>
> Was this page helpful? | Use Self-Service SSO to delegate SSO setup to your B2B customers.

..which states that ‘Both methods populate the same field: **`options.domain_aliases`** ’. However, when I issue the connection request I see no such `options` in the response:

```auto
curl --request GET \
  --url 'https://REMOVED.eu.auth0.com/api/v2/connections/con_REMOVED?fields=options' \
  --header 'authorization: Bearer REMOVED'
{"id":"con_REMOVED","is_domain_connection":false,"authentication":{"active":true},"connected_accounts":{"active":false}}%    

```

Is this a bug, or a documentation issue?

Any input much appreciated.

Thanks for looking

---

<div class="post-metadata">

**Author:** ![nathan.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nathan.johnson/32/71938_2.png) [@nathan.johnson](https://community.auth0.com/u/nathan.johnson)\
**Post date:** [March 9, 2026, 4:12pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/2 "2026-03-09T16:12:23Z")

</div>

Note, in the management console the aliases are clearly visible in the Connnection/Login Experience/Home Realm Discovery/Identity Provider domain list.

---

<div class="post-metadata">

**Author:** ![JFoxUK](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jfoxuk/32/78058_2.png) [@JFoxUK](https://community.auth0.com/u/JFoxUK)\
**Post date:** [March 9, 2026, 4:29pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/3 "2026-03-09T16:29:40Z")

</div>

Hi!

I haven’t done it before but did you get to this point in the doc where you create the ticket via this API? [Welcome to Auth0 Docs - Auth0 Docs](https://auth0.com/docs/api/management/v2/self-service-profiles/post-sso-ticket)

---

<div class="post-metadata">

**Author:** ![nathan.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nathan.johnson/32/71938_2.png) [@nathan.johnson](https://community.auth0.com/u/nathan.johnson)\
**Post date:** [March 9, 2026, 4:47pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/4 "2026-03-09T16:47:31Z")

</div>

Yes, profile created, ticket created, wizard completed. I am currently pre-verifying by passing domain\_aliases when creating the ticket. This is for ease of initial testing of the flow.

---

<div class="post-metadata">

**Author:** ![JFoxUK](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jfoxuk/32/78058_2.png) [@JFoxUK](https://community.auth0.com/u/JFoxUK)\
**Post date:** [March 9, 2026, 4:52pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/5 "2026-03-09T16:52:22Z")

</div>

The examples in document use different APIs to the one in your question?  
/v2/self-service-profiles [Welcome to Auth0 Docs - Auth0 Docs](https://auth0.com/docs/api/management/v2/self-service-profiles/get-self-service-profiles)  
/v2/self-service-profiles/{id}/sso-ticket [Welcome to Auth0 Docs - Auth0 Docs](https://auth0.com/docs/api/management/v2/self-service-profiles/post-sso-ticket?_gl=1*3dt82n*_gcl_aw*R0NMLjE3NzI4MDc3NDAuQ2owS0NRaUFrNnJOQmhDeEFSSXNBTjVtUUx0Z3ZiYjB1T21CYV9WdHB1NWFyTHZXc3VHa2l3VTIzY1N5c0ZyYzBhTjlnV1FFcUV0WmF0QWFBdS1YRUFMd193Y0I.*_gcl_au*MTI1OTI2MjAyMi4xNzcwMjA1OTQ3*_ga*MTI5OTMyNzE0OC4xNzcwMjA1OTQ3*_ga_QKMSDV5369*czE3NzMwNjk5NTkkbzQ4JGcxJHQxNzczMDc1MDAzJGozOCRsMCRoMA)..

---

<div class="post-metadata">

**Author:** ![JFoxUK](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jfoxuk/32/78058_2.png) [@JFoxUK](https://community.auth0.com/u/JFoxUK)\
**Post date:** [March 9, 2026, 4:54pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/6 "2026-03-09T16:54:11Z")

</div>

> [@nathan.johnson](#):
>
> `api/v2/connections/`

Although, this old thread may help:

> [@Lack of "options" field reference for the Connections Management API (v2)](https://community.auth0.com/t/lack-of-options-field-reference-for-the-connections-management-api-v2/39704):
>
> Hi all, The /api/v2/connections endpoint expects an options field to be provided when creating/updating Connections, with different options depending on the selected connection strategy. However, I cannot find any kind of reference for the available / required options for the Management API v2. There are several mentions of the options field in the API Explorer, but there’s no real information on specific options. I was able to find info about it in the Management API v1 reference, however th…

and here is the solution someone else found [Auth0 Connection Management Options - Full API Missing](https://community.auth0.com/t/auth0-connection-management-options-full-api-missing/38627)

---

<div class="post-metadata">

**Author:** ![nathan.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nathan.johnson/32/71938_2.png) [@nathan.johnson](https://community.auth0.com/u/nathan.johnson)\
**Post date:** [March 9, 2026, 5:23pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/7 "2026-03-09T17:23:54Z")

</div>

@JFoxUK wrt the `self-service` URLs your referenced. I have already done the ticket creation and connection setup wizard. I’m trying to fetch the resultant connection. The REST API docs for the get connection endpoint state a specific `read:connection_options`scope is required:

> **[Auth0 Management API v2](https://auth0.com/docs/api/management/v2/connections/get-connections-by-id)**

This was missing from my client API config, ~~but adding it did nothing 🙃~~

After a management token refresh this worked.

So it was a scope issue. The API normally gives good feedback on when there are relevant scopes configured for an API operation, but it was silent in this case. And not present in the main docs:

> **[Manage Self-Service SSO - Auth0 Docs](https://auth0.com/docs/authenticate/enterprise-connections/self-service-SSO/manage-self-service-sso#manage-self-service-sso)**
>
> Use Self-Service SSO to delegate SSO setup to your B2B customers.

Just nestled in the API docs.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 23, 2026, 5:23pm UTC](https://community.auth0.com/t/self-service-sso-connection-does-not-return-options-domain-aliases/197963/8 "2026-03-23T17:23:57Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
