MFAConfiguration

Configure and test multifactor authentication (MFA) methods

All URIs are relative to https://sailpoint.api.identitynow.com

Method	HTTP request	Description
Get-MFADuoConfigV1	GET /mfa/v1/duo-web/config	Configuration of duo mfa method
Get-MFAKbaConfigV1	GET /mfa/v1/kba/config	Configuration of kba mfa method
Get-MFAOktaConfigV1	GET /mfa/v1/okta-verify/config	Configuration of okta mfa method
Set-MFADuoConfigV1	PUT /mfa/v1/duo-web/config	Set duo mfa configuration
Set-MFAKBAConfigV1	POST /mfa/v1/kba/config/answers	Set mfa kba configuration
Set-MFAOktaConfigV1	PUT /mfa/v1/okta-verify/config	Set okta mfa configuration
Test-MFAConfigV1	GET /mfa/v1/{method}/test	Mfa method's test configuration

get-mfa-duo-config-v1

This API returns the configuration of an Duo MFA method.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description

Return type

Mfaduoconfig

Responses

Code	Description	Data Type
200	The configuration of an Duo MFA method.	Mfaduoconfig
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: Not defined
• Accept: application/json

Example

# Configuration of duo mfa method

try {
    Get-MFADuoConfigV1 
    
    # Below is a request that includes all optional parameters
    # Get-MFADuoConfigV1  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-MFADuoConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

get-mfa-kba-config-v1

This API returns the KBA configuration for MFA.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description
Query	AllLanguages	Boolean	(optional)	Indicator whether the question text should be returned in all configured languages * If true, the question text is returned in all languages that it is configured in. * If false, the question text is returned in the user locale if available, else for the default locale. * If not passed, it behaves the same way as passing this parameter as false

Return type

Kbaquestion[]

Responses

Code	Description	Data Type
200	The configuration for KBA MFA method.	Kbaquestion[]
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: Not defined
• Accept: application/json

Example

$AllLanguages = $false # Boolean | Indicator whether the question text should be returned in all configured languages    * If true, the question text is returned in all languages that it is configured in.    * If false, the question text is returned in the user locale if available, else for the default locale.     * If not passed, it behaves the same way as passing this parameter as false (optional)

# Configuration of kba mfa method

try {
    Get-MFAKbaConfigV1 
    
    # Below is a request that includes all optional parameters
    # Get-MFAKbaConfigV1 -AllLanguages $AllLanguages  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-MFAKbaConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

get-mfa-okta-config-v1

This API returns the configuration of an Okta MFA method.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description

Return type

Mfaoktaconfig

Responses

Code	Description	Data Type
200	The configuration of an Okta MFA method.	Mfaoktaconfig
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: Not defined
• Accept: application/json

Example

# Configuration of okta mfa method

try {
    Get-MFAOktaConfigV1 
    
    # Below is a request that includes all optional parameters
    # Get-MFAOktaConfigV1  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-MFAOktaConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

set-mfa-duo-config-v1

This API sets the configuration of an Duo MFA method.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description
Body	Mfaduoconfig	Mfaduoconfig	True

Return type

Mfaduoconfig

Responses

Code	Description	Data Type
200	MFA configuration of an Duo MFA method.	Mfaduoconfig
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: application/json
• Accept: application/json

Example

$Mfaduoconfig = @"{"mfaMethod":"duo-web","enabled":true,"host":"www.example.com","accessKey":"qw123Y3QlA5UqocYpdU3rEkzrK2D497y","identityAttribute":"email","configProperties":{"skey":"12q3WERlcUHWJmiMqyCXI3uOF7EaDJTbdeOp6E2B","ikey":"Q123WE45R6TY7890ZXCV"}}"@

# Set duo mfa configuration

try {
    $Result = ConvertFrom-JsonToMfaduoconfig -Json $Mfaduoconfig
    Set-MFADuoConfigV1 -Mfaduoconfig $Result 
    
    # Below is a request that includes all optional parameters
    # Set-MFADuoConfigV1 -Mfaduoconfig $Result  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Set-MFADuoConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

set-mfakba-config-v1

This API sets answers to challenge questions. Any configured questions omitted from the request are removed from user KBA configuration.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description
Body	Kbaanswerrequestitem	[]Kbaanswerrequestitem	True

Return type

Kbaanswerresponseitem[]

Responses

Code	Description	Data Type
200	The new KBA configuration for the user.	Kbaanswerresponseitem[]
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: application/json
• Accept: application/json

Example

 $Kbaanswerrequestitem = @"[{"id":"173423","answer":"822cd15d6c15aa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a0859a2fea34"},{"id":"c54fee53-2d63-4fc5-9259-3e93b9994135","answer":"9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08"}]"@ # Kbaanswerrequestitem[] | 
 

# Set mfa kba configuration

try {
    $Result = ConvertFrom-JsonToKbaanswerrequestitem -Json $Kbaanswerrequestitem
    Set-MFAKBAConfigV1 -Kbaanswerrequestitem $Result 
    
    # Below is a request that includes all optional parameters
    # Set-MFAKBAConfigV1 -Kbaanswerrequestitem $Result  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Set-MFAKBAConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

set-mfa-okta-config-v1

This API sets the configuration of an Okta MFA method.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description
Body	Mfaoktaconfig	Mfaoktaconfig	True

Return type

Mfaoktaconfig

Responses

Code	Description	Data Type
200	MFA configuration of an Okta MFA method.	Mfaoktaconfig
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: application/json
• Accept: application/json

Example

$Mfaoktaconfig = @"{"mfaMethod":"okta-verify","enabled":true,"host":"www.example.com","accessKey":"dk778Y3QlA5UqocYpdU3rEkzrK2D497y","identityAttribute":"email"}"@

# Set okta mfa configuration

try {
    $Result = ConvertFrom-JsonToMfaoktaconfig -Json $Mfaoktaconfig
    Set-MFAOktaConfigV1 -Mfaoktaconfig $Result 
    
    # Below is a request that includes all optional parameters
    # Set-MFAOktaConfigV1 -Mfaoktaconfig $Result  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Set-MFAOktaConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]

test-mfa-config-v1

This API validates that the configuration is valid and will properly authenticate with the MFA provider identified by the method path parameter.

API Spec

Parameters

Param Type	Name	Data Type	Required	Description
Path	Method	String	True	The name of the MFA method. The currently supported method names are 'okta-verify' and 'duo-web'.

Return type

Mfaconfigtestresponse

Responses

Code	Description	Data Type
200	The result of configuration test for the MFA provider.	Mfaconfigtestresponse
400	Client Error - Returned if the request body is invalid.	Errorresponsedto
401	Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.	GetMFAOktaConfigV1401Response
403	Forbidden - Returned if the user you are running as, doesn't have access to this end-point.	Errorresponsedto
429	Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.	GetMFAOktaConfigV1429Response
500	Internal Server Error - Returned if there is an unexpected error.	Errorresponsedto

HTTP request headers

• Content-Type: Not defined
• Accept: application/json

Example

$Method = "okta-verify" # String | The name of the MFA method. The currently supported method names are 'okta-verify' and 'duo-web'.

# Mfa method's test configuration

try {
    Test-MFAConfigV1 -Method $Method 
    
    # Below is a request that includes all optional parameters
    # Test-MFAConfigV1 -Method $Method  
} catch {
    Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Test-MFAConfigV1"
    Write-Host $_.ErrorDetails
}

[Back to top]