--- title: "Add a custom domain" description: "A hostname the customer owns (such as login.example.com) where the directory is served besides .sso.ezgh.app, as its own OIDC issuer and SAML entity. It starts pending, with the two records to create: a TXT record proving ownership and a CNAME to .sso.ezgh.app. sso-worker checks both at once, then every 15 minutes for a week; once both are found it has a certificate issued (ACME HTTP-01) and attached, and the domain becomes active. A hostname is claimed by one directory at a time. A directory has one custom domain: another hostname is 409 too_many_custom_domains until it's removed. While it's active, the pages people open directly on .sso.ezgh.app (the portal, sign-in, account, activation and reset links) redirect to it, and emails link to it; the OIDC and SAML endpoints there keep working." --- > Documentation Index > Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt > Use this file to discover all available pages before exploring further. Path: EZGH SSO API `POST /v1/organizations/{orgId}/sso/custom-domains` A hostname the customer owns (such as login.example.com) where the directory is served besides .sso.ezgh.app, as its own OIDC issuer and SAML entity. It starts pending, with the two records to create: a TXT record proving ownership and a CNAME to .sso.ezgh.app. sso-worker checks both at once, then every 15 minutes for a week; once both are found it has a certificate issued (ACME HTTP-01) and attached, and the domain becomes active. A hostname is claimed by one directory at a time. A directory has one custom domain: another hostname is 409 too_many_custom_domains until it's removed. While it's active, the pages people open directly on .sso.ezgh.app (the portal, sign-in, account, activation and reset links) redirect to it, and emails link to it; the OIDC and SAML endpoints there keep working. ## Authentication Requires one of the following: - `apiKey`, http, header `Authorization` - `oauth`, http, header `Authorization` - `sessionCookie`, apiKey, in cookie ## Path parameters - `CreateCustomDomain.path.orgId` (string, required) - format `uuid` ## Header parameters - `CreateCustomDomain.header.Idempotency-Key` (string, optional) — Makes a retry safe: the same key and request get the stored response. - pattern `^[\x21-\x7e]{1,200}$` ## Request body _Required._ - `CreateCustomDomain.hostname` (string, required) - maxLength 253 ## Example request ```json { "hostname": "string" } ``` ## Code samples ### cURL ```curl curl --request POST \ --url https://sso.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/sso/custom-domains \ --header 'Authorization: Bearer ' \ --header 'Content-Type: application/json' \ --data ' { "hostname": "string" } ' ``` ### TypeScript ```typescript const url = 'https://sso.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/sso/custom-domains'; const options = { method: 'POST', headers: {'Content-Type': 'application/json', Authorization: 'Bearer '}, body: JSON.stringify({hostname: 'string'}) }; fetch(url, options) .then(res => res.json()) .then(json => console.log(json)) .catch(err => console.error(err)); ``` ### Python ```python import requests url = "https://sso.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/sso/custom-domains" payload = { "hostname": "string" } headers = { "Content-Type": "application/json", "Authorization": "Bearer " } response = requests.post(url, json=payload, headers=headers) print(response.text) ``` ## Responses ### 201 The custom domain and its records. #### Example ```json { "activatedAt": "2019-08-24T14:15:22Z", "certificate": { "error": "string", "notAfter": "2019-08-24T14:15:22Z" }, "checkError": "string", "checkRequestedAt": "2019-08-24T14:15:22Z", "createdAt": "2019-08-24T14:15:22Z", "directoryId": "786c2ec1-fb9a-4593-b705-005b34c18c18", "hostname": "string", "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "issuer": "http://example.com", "lastCheckedAt": "2019-08-24T14:15:22Z", "organizationId": "7bc05553-4b68-44e8-b7bc-37be63c6d9e9", "records": [ { "found": true, "purpose": "ownership", "recordName": "string", "recordType": "TXT", "recordValue": "string" } ], "status": "pending", "updatedAt": "2019-08-24T14:15:22Z", "verifiedAt": "2019-08-24T14:15:22Z" } ``` - `CreateCustomDomain.response.201.activatedAt` (string | null, required) - format `date-time` - `CreateCustomDomain.response.201.certificate` (object, required) - `CreateCustomDomain.response.201.certificate.error` (string | null, required) — Why the certificate isn't issued or attached yet, as cert-manager or the Gateway reports it. - `CreateCustomDomain.response.201.certificate.notAfter` (string | null, required) — When the hostname's certificate expires; cert-manager renews it ahead of time. - format `date-time` - `CreateCustomDomain.response.201.checkError` (string | null, required) - `CreateCustomDomain.response.201.checkRequestedAt` (string | null, required) - format `date-time` - `CreateCustomDomain.response.201.createdAt` (string, required) - format `date-time` - `CreateCustomDomain.response.201.directoryId` (string, required) - format `uuid` - `CreateCustomDomain.response.201.hostname` (string, required) — Lowercase ASCII; an internationalized name in its xn-- form. - `CreateCustomDomain.response.201.id` (string, required) - format `uuid` - `CreateCustomDomain.response.201.issuer` (string, required) — https://: the OIDC issuer on this hostname (and the base of its SAML entity IDs), live while active. The directory's own issuer keeps working. - format `uri` - `CreateCustomDomain.response.201.lastCheckedAt` (string | null, required) - format `date-time` - `CreateCustomDomain.response.201.organizationId` (string, required) - format `uuid` - `CreateCustomDomain.response.201.records` (array, required) — The TXT record (purpose ownership), then the CNAME (purpose routing). - `CreateCustomDomain.response.201.records.found` (boolean | null, required) — Whether the last check found the record; null until a lookup answered. - `CreateCustomDomain.response.201.records.purpose` (string, required) - one of `"ownership"`, `"routing"` - `CreateCustomDomain.response.201.records.recordName` (string, required) — _ezgh-sso-verification. for the TXT record; the hostname for the CNAME. - `CreateCustomDomain.response.201.records.recordType` (string, required) - one of `"TXT"`, `"CNAME"` - `CreateCustomDomain.response.201.records.recordValue` (string, required) — ezgh-sso-verification= for the TXT record; .sso.ezgh.app for the CNAME. - `CreateCustomDomain.response.201.status` (string, required) — pending until sso-worker finds both records; issuing while the certificate is issued and attached to the Gateway; active once sso-edge serves the hostname. Two consecutive misses of either record make an issuing or active domain pending again, and it stops being served. - one of `"pending"`, `"issuing"`, `"active"` - `CreateCustomDomain.response.201.updatedAt` (string, required) - format `date-time` - `CreateCustomDomain.response.201.verifiedAt` (string | null, required) — When both records were found. - format `date-time` ### 400 invalid_request (with issues), invalid_cursor, or the endpoint's own 400 codes. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.400.error` (object, required) - `CreateCustomDomain.response.400.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.400.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.400.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.400.error.issues.message` (string, required) - `CreateCustomDomain.response.400.error.issues.path` (string, required) - `CreateCustomDomain.response.400.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.400.error.quota.id` (string, required) - `CreateCustomDomain.response.400.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.400.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.400.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.400.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.400.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.400.error.quota.region` (string, optional) - `CreateCustomDomain.response.400.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.400.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.400.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.400.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 401 unauthenticated: no credential, or one that doesn't check out. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.401.error` (object, required) - `CreateCustomDomain.response.401.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.401.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.401.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.401.error.issues.message` (string, required) - `CreateCustomDomain.response.401.error.issues.path` (string, required) - `CreateCustomDomain.response.401.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.401.error.quota.id` (string, required) - `CreateCustomDomain.response.401.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.401.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.401.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.401.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.401.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.401.error.quota.region` (string, optional) - `CreateCustomDomain.response.401.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.401.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.401.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.401.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 403 access_denied: the caller's policies don't allow the action; forbidden_origin: a cookie-authenticated write from an origin that isn't allowed; spend_limit_reached. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.403.error` (object, required) - `CreateCustomDomain.response.403.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.403.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.403.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.403.error.issues.message` (string, required) - `CreateCustomDomain.response.403.error.issues.path` (string, required) - `CreateCustomDomain.response.403.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.403.error.quota.id` (string, required) - `CreateCustomDomain.response.403.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.403.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.403.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.403.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.403.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.403.error.quota.region` (string, optional) - `CreateCustomDomain.response.403.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.403.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.403.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.403.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 404 not_found: unknown, malformed, or in an organization the caller isn't in. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.404.error` (object, required) - `CreateCustomDomain.response.404.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.404.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.404.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.404.error.issues.message` (string, required) - `CreateCustomDomain.response.404.error.issues.path` (string, required) - `CreateCustomDomain.response.404.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.404.error.quota.id` (string, required) - `CreateCustomDomain.response.404.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.404.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.404.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.404.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.404.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.404.error.quota.region` (string, optional) - `CreateCustomDomain.response.404.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.404.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.404.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.404.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 409 quota_exceeded (an allocation quota, with quota), idempotency_conflict, idempotency_in_progress (with Retry-After), organization_deletion_pending, operation_in_progress, or the endpoint's own 409 codes. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.409.error` (object, required) - `CreateCustomDomain.response.409.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.409.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.409.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.409.error.issues.message` (string, required) - `CreateCustomDomain.response.409.error.issues.path` (string, required) - `CreateCustomDomain.response.409.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.409.error.quota.id` (string, required) - `CreateCustomDomain.response.409.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.409.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.409.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.409.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.409.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.409.error.quota.region` (string, optional) - `CreateCustomDomain.response.409.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.409.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.409.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.409.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 413 payload_too_large: the body is over the endpoint's limit (1 MiB unless it says otherwise). #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.413.error` (object, required) - `CreateCustomDomain.response.413.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.413.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.413.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.413.error.issues.message` (string, required) - `CreateCustomDomain.response.413.error.issues.path` (string, required) - `CreateCustomDomain.response.413.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.413.error.quota.id` (string, required) - `CreateCustomDomain.response.413.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.413.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.413.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.413.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.413.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.413.error.quota.region` (string, optional) - `CreateCustomDomain.response.413.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.413.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.413.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.413.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 429 too_many_requests, with Retry-After; or quota_exceeded (a rate, usage or concurrency quota, with quota), never with Retry-After. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.429.error` (object, required) - `CreateCustomDomain.response.429.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.429.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.429.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.429.error.issues.message` (string, required) - `CreateCustomDomain.response.429.error.issues.path` (string, required) - `CreateCustomDomain.response.429.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.429.error.quota.id` (string, required) - `CreateCustomDomain.response.429.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.429.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.429.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.429.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.429.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.429.error.quota.region` (string, optional) - `CreateCustomDomain.response.429.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.429.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.429.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.429.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 500 internal_error: a bug; the details are in the logs, under the request ID. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.500.error` (object, required) - `CreateCustomDomain.response.500.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.500.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.500.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.500.error.issues.message` (string, required) - `CreateCustomDomain.response.500.error.issues.path` (string, required) - `CreateCustomDomain.response.500.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.500.error.quota.id` (string, required) - `CreateCustomDomain.response.500.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.500.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.500.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.500.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.500.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.500.error.quota.region` (string, optional) - `CreateCustomDomain.response.500.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.500.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.500.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.500.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. ### 503 unavailable: a dependency the request needs is down. Retry after Retry-After. #### Example ```json { "error": { "code": "string", "issues": [ { "message": "string", "path": "string" } ], "message": "string", "quota": { "id": "string", "inFlight": 0, "kind": "allocation", "limit": 0, "periodStart": "2019-08-24T14:15:22Z", "region": "string", "resetsAt": "2019-08-24T14:15:22Z", "scope": "organization", "scopeResourceName": "string", "used": 0, "window": "string" } } } ``` - `CreateCustomDomain.response.503.error` (object, required) - `CreateCustomDomain.response.503.error.code` (string, required) - maxLength 64; pattern `^[a-z][a-z0-9_]*$` - `CreateCustomDomain.response.503.error.message` (string, required) - maxLength 1024 - `CreateCustomDomain.response.503.error.issues` (array, optional) — invalid_request: one entry per problem, at a dotted path. - `CreateCustomDomain.response.503.error.issues.message` (string, required) - `CreateCustomDomain.response.503.error.issues.path` (string, required) - `CreateCustomDomain.response.503.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After. - `CreateCustomDomain.response.503.error.quota.id` (string, required) - `CreateCustomDomain.response.503.error.quota.kind` (unknown, required) - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"` - `CreateCustomDomain.response.503.error.quota.limit` (integer, required) - min 0 - `CreateCustomDomain.response.503.error.quota.scope` (unknown, required) - one of `"organization"`, `"project"`, `"resource"` - `CreateCustomDomain.response.503.error.quota.inFlight` (integer, optional) - min 0 - `CreateCustomDomain.response.503.error.quota.periodStart` (string, optional) - format `date-time` - `CreateCustomDomain.response.503.error.quota.region` (string, optional) - `CreateCustomDomain.response.503.error.quota.resetsAt` (string, optional) - format `date-time` - `CreateCustomDomain.response.503.error.quota.scopeResourceName` (string, optional) - `CreateCustomDomain.response.503.error.quota.used` (integer, optional) - min 0 - `CreateCustomDomain.response.503.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H. Source: https://docs.ezghcloud.com/sso-api/CreateCustomDomain/index.md