v1
latestOpenAPI 3.0.02026-07-246171,3332.1 MBRequest body
Access expiration date in Unix timestamp (select 0 for access without expiry date)
limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
Comma separated list of allowed CORS domains to be validated as part of the authentication flow.
Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"
A list of names. At least one must exist in the Common Name. Supports globbing.
A list of DNS names. At least one must exist in the SANs. Supports globbing.
A list of Email Addresses. At least one must exist in the SANs. Supports globbing.
A list of extensions formatted as "oid:value". Expects the extension value to be some type of ASN1 encoded string. All values much match. Supports globbing on "value".
A CIDR whitelist with the IPs that the access is restricted to
A list of Organizational Units names. At least one must exist in the OU field.
A list of URIs. At least one must exist in the SANs. Supports globbing.
The certificate data in base64, if no file was provided
Protection from accidental deletion of this object [true/false]
Auth Method description
How many days before the expiration of the auth method would you like to be notified.
if true: enforce role-association must include sub claims
A CIDR whitelist with the GW IPs that the access is restricted to
Set output format to JSON
Jwt TTL
Auth Method name
Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
Require certificate CRL distribution points (CDP) and enforce CRL validation during authentication.
A list of revoked cert ids
Authentication token (see /auth and /configure)
The universal identity token, Required only for universal_identity authentication
A unique identifier (ID) value should be configured, such as common_name or organizational_unit Whenever a user logs in with a token, these authentication types issue a "sub claim" that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
Response
authMethodCreateCertResponse wraps response body.