/auth-method-create-kerberos

Body Params
int64
Defaults to 0

Access expiration date in Unix timestamp (select 0 for access without expiry date)

allowed-client-type
array of strings

limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]

allowed-client-type
audit-logs-claims
array of strings

Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"

audit-logs-claims
string
string
bound-ips
array of strings

A CIDR whitelist with the IPs that the access is restricted to

bound-ips
string

Protection from accidental deletion of this object [true/false]

string

Auth Method description

expiration-event-in
array of strings

How many days before the expiration of the auth method would you like to be notified.

expiration-event-in
boolean

if true: enforce role-association must include sub claims

string
string
string
gw-bound-ips
array of strings

A CIDR whitelist with the GW IPs that the access is restricted to

gw-bound-ips
boolean
Defaults to false

Set output format to JSON

int64
Defaults to 0

Jwt TTL

string
string
string
string
boolean
string
string
string
required

Auth Method name

product-type
array of strings

Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]

product-type
subclaims-delimiters
array of strings

A list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT)

subclaims-delimiters
string

Authentication token (see /auth and /configure)

string

The universal identity token, Required only for universal_identity authentication

string

A unique identifier (ID) value which is a "sub claim" name that contains details uniquely identifying that resource. This "sub claim" is used to distinguish between different identities.

string
string
Responses

Language
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
Footer Section