/auth-method-create-kerberosAsk AIpost https://api.akeyless.io/auth-method-create-kerberosBody Paramsaccess-expiresint64Defaults to 0Access expiration date in Unix timestamp (select 0 for access without expiry date)allowed-client-typearray of stringslimit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]allowed-client-typeADD stringaudit-logs-claimsarray of stringsSubclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"audit-logs-claimsADD stringbind-dnstringbind-dn-passwordstringbound-ipsarray of stringsA CIDR whitelist with the IPs that the access is restricted tobound-ipsADD stringdelete_protectionstringProtection from accidental deletion of this object [true/false]descriptionstringAuth Method descriptionexpiration-event-inarray of stringsHow many days before the expiration of the auth method would you like to be notified.expiration-event-inADD stringforce-sub-claimsbooleanif true: enforce role-association must include sub claimstruefalsegroup-attrstringgroup-dnstringgroup-filterstringgw-bound-ipsarray of stringsA CIDR whitelist with the GW IPs that the access is restricted togw-bound-ipsADD stringjsonbooleanDefaults to falseSet output format to JSONtruefalsejwt-ttlint64Defaults to 0Jwt TTLkeytab-file-datastringkeytab-file-pathstringkrb5-conf-datastringkrb5-conf-pathstringldap-anonymous-searchbooleantruefalseldap-ca-certstringldap-urlstringnamestringrequiredAuth Method nameproduct-typearray of stringsChoose the relevant product type for the auth method [sm, sra, pm, dp, ca]product-typeADD stringsubclaims-delimitersarray of stringsA list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT)subclaims-delimitersADD stringtokenstringAuthentication token (see /auth and /configure)uid-tokenstringThe universal identity token, Required only for universal_identity authenticationunique-identifierstringA unique identifier (ID) value which is a "sub claim" name that contains details uniquely identifying that resource. This "sub claim" is used to distinguish between different identities.user-attributestringuser-dnstringResponses 201 defaulterrorResponse wraps any error to return it as a JSON object with one "error" field.Updated 7 months ago