Create a session policy.
The SessionPolicyServiceCreateRequest message.
The accessTokenTtlSeconds field.
PolicyOutcome is the effect of a matched rule. Exactly one kind is set. For session continuous-evaluation, the meaningful kinds are Allow (continue), Deny (terminate), and StepUpRequired.
This message contains a oneof named kind. Only a single field of the following list may be set at a time:
The continuousRules field.
The credentialDurations field.
The displayName field.
The idleTimeoutSeconds field.
The maxSessionDurationSeconds field.
The persistence field.
The priority field.
The refreshRotationWindowSeconds field.
The refreshTokenTtlSeconds field.
The rotateRefreshOnUse field.
SSFReceiverConfig selects which inbound shared-signals streams this session trusts. Each stream's issuer, keys, expected audience, and per-event actions are configured on the stream itself; this policy just lists the stream IDs.
SSFTransmitterConfig selects which outbound shared-signals streams this session emits security events to. Each stream's delivery endpoint, authentication, and per-event allowlist are configured on the stream itself; this policy just lists the stream IDs and the event types to emit.
Successful response
The SessionPolicyServiceCreateResponse message.
SessionPolicy defines session lifetime and continuous-evaluation behavior.