---
title: "POST /v1/{+name}:validateTrust"
method: POST
path: "/v1/{+name}:validateTrust"
tags: ["projects"]
---

# POST /v1/{+name}:validateTrust

`POST /v1/{+name}:validateTrust`

Validates a trust state, that the target domain is reachable, and that the target domain is able to accept incoming trust requests.

## Path parameters

- `name` string, required

## Request body

- ValidateTrustRequest — Request message for ValidateTrust
  - `trust` Trust — Represents a relationship between two domains. This allows a controller in one domain to authenticate a user in another domain. If the trust is being changed, it will be placed into the UPDATING state, which indicates that the resource is being reconciled. At this point, Get will reflect an intermediate state.
    - `createTime` string, google-datetime — Output only. The time the instance was created.
    - `state` 'STATE_UNSPECIFIED' | 'CREATING' | 'UPDATING' | 'DELETING' | 'CONNECTED' | 'DISCONNECTED' — Output only. The current state of the trust.
    - `targetDnsIpAddresses` string[] — Required. The target DNS server IP addresses which can resolve the remote domain involved in the trust.
    - `targetDomainName` string — Required. The fully qualified target domain name which will be in trust with the current domain.
    - `trustHandshakeSecret` string — Required. The trust secret used for the handshake with the target domain. This will not be stored.
    - `stateDescription` string — Output only. Additional information about the current state of the trust, if available.
    - `trustType` 'TRUST_TYPE_UNSPECIFIED' | 'FOREST' | 'EXTERNAL' — Required. The type of trust represented by the trust resource.
    - `trustDirection` 'TRUST_DIRECTION_UNSPECIFIED' | 'INBOUND' | 'OUTBOUND' | 'BIDIRECTIONAL' — Required. The trust direction, which decides if the current domain is trusted, trusting, or both.
    - `selectiveAuthentication` boolean — Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
    - `updateTime` string, google-datetime — Output only. The last update time.
    - `lastTrustHeartbeatTime` string, google-datetime — Output only. The last heartbeat time when the trust was known to be connected.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/managedidentities.md) · [All operations](https://skmtc.net/google/apis/managedidentities/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/managedidentities/versions/def2f0a79c2b/schema)