authLockedAfterstring date-time
Optional. ISO 8601 date/time of when the identity cannot be used after. Changing password before authLockedAfter would set authLockedAfter to null and effectively make the identity usable any time
authLockedUntilstring date-time
Optional. ISO 8601 date/time of when the identity cannot be used before
base64EncodedPublicKeystring
An optional PKI RSA public key for added security. If a public key is provided then the PKI login-challenges endpoint should be used to get a challenge to respond to as part of the login
changeAfterstring date-time
Optional. ISO 8601 date/time of when the current password expires and a password reset must be done
failedAuthAttemptsinteger
identitystring required
Identity/username for authentication
totpEnabledboolean
Whether this identity will require a time base one time password when authenticating
totpQrCodestring
Resets the TOTP secret and returns a new QRCode which can be scanned with any RFC 6238 compliant App (E.g. Google Authenticator)