In terms of authentication I think being able to add a (very specific) piece of content to the site or being able to add a DNS record are two common solutions.

In terms of authentication I think being able to add a (very specific) piece of content to the site or being able to add a DNS record are two common solutions. I'm not suggesting it's viable in this case though.