Skip to main content

ResourceRule

A ResourceRule defines the information returned about a resource rule. A resource rule is used to determine what authentication is used to authenticate to the specified resource (aka application).

Properties

NameTypeDescriptionNotes
ApiVersionint?The resource rules API version used to create or last update this resource rule. If the resource rule is at version 2, then it cannot be updated using a version 1 API.[optional] [readonly]
DateTimeContextDateTimeContext[optional]
DescriptionstringThe description of the resource rule.[optional]
DeviceCertificateContextDeviceCertificateContext[optional]
DisableSSOboolA flag indicating if single-sign on is disabled for this resource rule.
Enabledbool?A flag indicating if this resource rule is enabled or not. Only enabled resource rules are considered during authentication.[optional]
GroupsList<Group>The groups associated with this resource rule. The resource rule only applies to users in one of the specified groups. A resource rule must specify at least one group which can be the default All Groups if you want the resource rule to apply to all users.
HighRiskAuthenticationFlowAuthenticationFlow[optional]
HighRiskEnableSmartLoginbool?A flag indicating if Smart Login is enabled for High risk. This parameter is deprecated, use the highRiskAuthenticationFlow attribute with v2 APIs.[optional]
HighRiskFirstStepstringThe authenticator type to use in the first step of a two-step authentication scenario when the risk score is High. This parameter is deprecated, use the highRiskAuthenticationFlow attribute with v2 APIs.[optional]
HighRiskSecondStepList<ResourceRule.HighRiskSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the risk score is High. This parameter is deprecated, use the highRiskAuthenticationFlow attribute with v2 APIs.[optional]
IdstringThe unique UUID assigned to the resource rule when it is created.[optional]
IpContextIpContext[optional]
KbaContextKbaContext[optional]
LocationContextLocationContext[optional]
LocationHistoryContextLocationHistoryContext[optional]
LowRiskAuthenticationFlowAuthenticationFlow[optional]
LowRiskEnableSmartLoginbool?A flag indicating if Smart Login is enabled for Low risk. This parameter is deprecated, use the lowRiskAuthenticationFlow attribute with v2 APIs.[optional]
LowRiskFirstStepstringThe authenticator type to use in the first step of a two-step authentication scenario when the risk score is Low. This parameter is deprecated, use the lowRiskAuthenticationFlow attribute with v2 APIs.[optional]
LowRiskSecondStepList<ResourceRule.LowRiskSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the risk score is Low. This parameter is deprecated, use the lowRiskAuthenticationFlow attribute with v2 APIs.[optional]
LowRiskThresholdint?Risk scores below this value are considered Low risk.[optional]
MachineContextMachineContext[optional]
MediumRiskAuthenticationFlowAuthenticationFlow[optional]
MediumRiskEnableSmartLoginbool?A flag indicating if Smart Login is enabled for Medium risk. This parameter is deprecated, use the mediumRiskAuthenticationFlow attribute with v2 APIs.[optional]
MediumRiskFirstStepstringThe authenticator type to use in the first step of a two-step authentication scenario when the risk score is Medium. This parameter is deprecated, use the mediumRiskAuthenticationFlow attribute with v2 APIs.[optional]
MediumRiskSecondStepList<ResourceRule.MediumRiskSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the risk score is Medium. This parameter is deprecated, use the mediumRiskAuthenticationFlow attribute with v2 APIs.[optional]
MediumRiskThresholdint?Risk scores below this value are considered Medium risk. Risk scores equal or greater than this value are considered High risk.[optional]
NamestringThe name of the resource rule.
ResourceIdstringThe UUID of the resource to which this resource rule is assigned.[optional]
ResourceNamestringThe name of the resource to which this resource rule is assigned.[optional]
RiskEngineContextsList<TransactionContext>If risk engine rules are defined, the transaction contexts specify the levels at which risk is applied to the authentication request if the corresponding risk engine rules trigger risk.[optional]
SkipSecondFactorIfUserNotExistboolA flag indicating if second factor can be skipped if the user does not exist and the first factor is EXTERNAL.
StrictAccessboolA flag indicating if this resource rule enforces strict access. Strict access means that if this rule denies access, the user is denied access even if other resource rules allow access.
SystemResourceContextbool?A flag indicating if this resource rule is associated with a system resource including the Admin and User portals. A resource rule for a system resource cannot be deleted. They can only be disabled if there is at least one enabled resource rule for the resource.[optional]
TransactionContextsList<TransactionContext>If transaction details are specified during an authentication request, the transaction contexts specify the levels at which risk is applied to the authentication request if the corresponding transaction rules trigger risk. A maximum of two are allowed.[optional]
TravelVelocityContextTravelVelocityContext[optional]