accessExpires |
Number |
Access expiration date in Unix timestamp (select 0 for access without expiry date) |
[optional] [default to 0] |
allowedCors |
String |
Comma separated list of allowed CORS domains to be validated as part of the authentication flow. |
[optional] |
auditLogsClaims |
[String] |
Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username" |
[optional] |
boundCommonNames |
[String] |
A list of names. At least one must exist in the Common Name. Supports globbing. |
[optional] |
boundDnsSans |
[String] |
A list of DNS names. At least one must exist in the SANs. Supports globbing. |
[optional] |
boundEmailSans |
[String] |
A list of Email Addresses. At least one must exist in the SANs. Supports globbing. |
[optional] |
boundExtensions |
[String] |
A list of extensions formatted as "oid:value". Expects the extension value to be some type of ASN1 encoded string. All values much match. Supports globbing on "value". |
[optional] |
boundIps |
[String] |
A CIDR whitelist with the IPs that the access is restricted to |
[optional] |
boundOrganizationalUnits |
[String] |
A list of Organizational Units names. At least one must exist in the OU field. |
[optional] |
boundUriSans |
[String] |
A list of URIs. At least one must exist in the SANs. Supports globbing. |
[optional] |
certificateData |
String |
The certificate data in base64, if no file was provided |
[optional] |
deleteProtection |
String |
Protection from accidental deletion of this object [true/false] |
[optional] |
description |
String |
Auth Method description |
[optional] |
forceSubClaims |
Boolean |
if true: enforce role-association must include sub claims |
[optional] |
gwBoundIps |
[String] |
A CIDR whitelist with the GW IPs that the access is restricted to |
[optional] |
json |
Boolean |
Set output format to JSON |
[optional] [default to false] |
jwtTtl |
Number |
Jwt TTL |
[optional] [default to 0] |
name |
String |
Auth Method name |
|
newName |
String |
Auth Method new name |
[optional] |
productType |
[String] |
Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |
[optional] |
revokedCertIds |
[String] |
A list of revoked cert ids |
[optional] |
token |
String |
Authentication token (see `/auth` and `/configure`) |
[optional] |
uidToken |
String |
The universal identity token, Required only for universal_identity authentication |
[optional] |
uniqueIdentifier |
String |
A unique identifier (ID) value should be configured, such as common_name or organizational_unit Whenever a user logs in with a token, these authentication types issue a "sub claim" that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization. |
|