Skip to main content

AuthenticationFlowParms

Parameters defining the new authentication flow.

Properties

NameTypeDescriptionNotes
idpDomainBasedBooleanA flag indicating if the authentication flow will be using only domain-based IDPs.[optional]
idpLoginSecondStepList<IdpLoginSecondStepEnum>The authenticator type to use during in the second step of a two-step authentication scenario when the OIDC identity provider Login flow is enabled and requires a second factor.[optional]
loginFlowsList<LoginFlow>List of enabled login flows--at least one must be enabled. If a login flow is not provided, then it's treated as disabled. Enabled login flows must be supported by the account entitlement.
nameStringThe name of the authentication flow.[optional]
oidcIdentityProviderIdsList<String>The UUIDs of the OIDC identity providers supported when the IDP login flow is enabled--at least one is required.[optional]
userLoginFirstStepUserLoginFirstStepEnumThe authenticator type to use in the first step of a two-step authentication scenario when the User Login flow is enabled.[optional]
userLoginSecondStepList<UserLoginSecondStepEnum>The list of authenticator types to use in the second step of a two-step authentication scenario when the User Login flow is enabled. Use an empty array when none is required.[optional]

List<IdpLoginSecondStepEnum>

NameValue
NONE"NONE"
KBA"KBA"
TEMP_ACCESS_CODE"TEMP_ACCESS_CODE"
OTP"OTP"
GRID"GRID"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
FIDO"FIDO"
USER_CERTIFICATE"USER_CERTIFICATE"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
FACE"FACE"

UserLoginFirstStepEnum

NameValue
NONE"NONE"
EXTERNAL"EXTERNAL"
PASSWORD"PASSWORD"
KBA"KBA"
OTP"OTP"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
IDP"IDP"
PASSKEY"PASSKEY"
SMART_LOGIN"SMART_LOGIN"
USER_CERTIFICATE"USER_CERTIFICATE"
FACE"FACE"
DENY"DENY"

List<UserLoginSecondStepEnum>

NameValue
NONE"NONE"
KBA"KBA"
TEMP_ACCESS_CODE"TEMP_ACCESS_CODE"
OTP"OTP"
GRID"GRID"
TOKEN"TOKEN"
TOKENPUSH"TOKENPUSH"
FIDO"FIDO"
USER_CERTIFICATE"USER_CERTIFICATE"
SMARTCREDENTIALPUSH"SMARTCREDENTIALPUSH"
FACE"FACE"