v1
latestOpenAPI 3.0.02026-07-246171,3332.1 MBRequest body
Access expiration date in Unix timestamp (select 0 for access without expiry date)
limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
The audience in the JWT
Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"
The clients ids that the access is restricted to
A CIDR whitelist with the IPs that the access is restricted to
CertificateFile Path to a file that contain the certificate in a PEM format.
CertificateFileData PEM Certificate in a Base64 format.
Protection from accidental deletion of this object [true/false]
Auth Method description
How many days before the expiration of the auth method would you like to be notified.
if true: enforce role-association must include sub claims
Akeyless Gateway URL (Configuration Management port). Relevant only when the jwks-uri is accessible only from the gateway.
A CIDR whitelist with the GW IPs that the access is restricted to
Issuer URL
Set output format to JSON
The JSON Web Key Set (JWKS) that containing the public keys that should be used to verify any JSON Web Token (JWT) issued by the authorization server. base64 encoded string
The URL to the JSON Web Key Set (JWKS) that containing the public keys that should be used to verify any JSON Web Token (JWT) issued by the authorization server.
Jwt TTL
Auth Method name
Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]
A list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT)
Authentication token (see /auth and /configure)
The universal identity token, Required only for universal_identity authentication
A unique identifier (ID) value should be configured for OAuth2, LDAP and SAML authentication method types and is usually a value such as the email, username, or upn for example. Whenever a user logs in with a token, these authentication types issue a "sub claim" that contains details uniquely identifying that user. This sub claim includes a key containing the ID value that you configured, and is used to distinguish between different users from within the same organization.
Response
createAuthMethodOAuth2Response wraps response body.