Skip to main content

AuthenticationFlow

An AuthenticationFlow defines the authentication options available for a given risk level.

Properties

NameTypeDescriptionNotes
applicationsList<ApplicationResourceRule>List of applications using this authentication flow.[optional]
idStringThe unique UUID assigned to the authentication flow when it is created.
idpDomainBasedBooleanA flag indicating if the authentication flow will be using only domain-based IDPs.[optional]
idpLoginSecondStepList<IdpLoginSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the OIDC identity provider Login flow is enabled and requires a second factor.[optional]
loginFlowsList<LoginFlow>List of login flows.
nameStringThe name of the authentication flow.
oidcIdentityProvidersList<OidcIdentityProvider>The OIDC identity providers supported when the IDP login flow is enabled--limited info is returned.[optional]
readOnlyBooleanA flag indicating if the authentication flow can be modified or deleted.
userLoginFirstStepUserLoginFirstStepEnumThe authenticator type to use in the first step of a two-step authentication scenario when the User Login flow is enabled.[optional]
userLoginSecondStepList<UserLoginSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the User Login flow is enabled.[optional]

List<IdpLoginSecondStepEnum>

NameValue
NONE"NONE"
KBA"KBA"
TEMP_ACCESS_CODE"TEMP_ACCESS_CODE"
OTP"OTP"
GRID"GRID"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
FIDO"FIDO"
USER_CERTIFICATE"USER_CERTIFICATE"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
FACE"FACE"

UserLoginFirstStepEnum

NameValue
NONE"NONE"
EXTERNAL"EXTERNAL"
PASSWORD"PASSWORD"
KBA"KBA"
OTP"OTP"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
IDP"IDP"
PASSKEY"PASSKEY"
SMART_LOGIN"SMART_LOGIN"
USER_CERTIFICATE"USER_CERTIFICATE"
FACE"FACE"
DENY"DENY"

List<UserLoginSecondStepEnum>

NameValue
NONE"NONE"
KBA"KBA"
TEMP_ACCESS_CODE"TEMP_ACCESS_CODE"
OTP"OTP"
GRID"GRID"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
FIDO"FIDO"
USER_CERTIFICATE"USER_CERTIFICATE"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
FACE"FACE"