/authAsk AIpost https://api.akeyless.io/authRecent RequestsLog in to see full request historyTimeStatusUser Agent Retrieving recent requests…LoadingLoading…Body Paramsaccess-idstringAccess IDaccess-keystringAccess key (relevant only for access-type=access_key)access-typestringDefaults to access_keyAccess Type (access_key/password/saml/ldap/k8s/azure_ad/oidc/aws_iam/universal_identity/jwt/gcp/cert/oci/kerberos)account-idstringAccount id (relevant only for access-type=password where the email address is associated with more than one account)admin-emailstringEmail (relevant only for access-type=password)admin-passwordstringPassword (relevant only for access-type=password)azure-cloudstringDefaults to AzureCloudAzure cloud environment to use. Values: AzureCloud (default), AzureUSGovernment, AzureChinaCloud.cert-challengestringCertificate challenge encoded in base64. (relevant only for access-type=cert)cert-datastringCertificate data encoded in base64. Used if file was not provided. (relevant only for access-type=cert)cloud-idstringThe cloud identity (relevant only for access-type=azure_ad,aws_iam,gcp)debugbooleantruefalsedisable-pafxfaststringDisable the FAST negotiation in the Kerberos authentication methodgateway-spnstringThe service principal name of the gateway as registered in LDAP (i.e., HTTP/gateway)gateway-urlstringGateway URL relevant only for access-type=k8s/oauth2/saml/oidcgcp-audiencestringDefaults to akeyless.ioGCP JWT audiencejsonbooleanDefaults to falseSet output format to JSONtruefalsejwtstringThe Json Web Token (relevant only for access-type=jwt/oidc)k8s-auth-config-namestringThe K8S Auth config name (relevant only for access-type=k8s)k8s-service-account-tokenstringThe K8S service account token. (relevant only for access-type=k8s)kerberos-tokenstringKerberosToken represents a Kerberos token generated for the gateway SPN (Service Principal Name).kerberos-usernamestringTThe username for the entry within the keytab to authenticate via Kerberoskey-datastringPrivate key data encoded in base64. Used if file was not provided.(relevant only for access-type=cert)keytab-datastringBase64-encoded content of a valid keytab file, containing the service account's entry.krb5-conf-datastringBase64-encoded content of a valid krb5.conf file, specifying the settings and parameters required for Kerberos authentication.ldap-passwordstringLDAP password (relevant only for access-type=ldap)oci-auth-typestringDefaults to apikeyThe type of the OCI configuration to use [instance/apikey/resource] (relevant only for access-type=oci)oci-group-ocidarray of stringsA list of Oracle Cloud IDs groups (relevant only for access-type=oci)oci-group-ocidADD stringotpstringsigned-cert-challengestringSigned certificate challenge encoded in base64. (relevant only for access-type=cert)uid-tokenstringThe universal_identity token (relevant only for access-type=universal_identity)use-remote-browserbooleanReturns a link to complete the authentication remotely (relevant only for access-type=saml/oidc)truefalseusernamestringLDAP username (relevant only for access-type=ldap)Responses 200authResponse wraps response body. 401errorResponse wraps any error to return it as a JSON object with one "error" field. defaulterrorResponse wraps any error to return it as a JSON object with one "error" field.Updated 7 months ago