Static
createThe OAuth Profile object's attributes. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate a Group Access Level object. Create a Group Access Level object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
groupName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation. Requests which include the following attributes require greater access scope/level:
Attribute | Access Scope/Level |
---|---|
globalAccessLevel | global/admin |
This has been available since 2.24.
OauthProfileAccessLevelGroupResponse The Group Access Level object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Group Access Level object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate a Message VPN Access-Level Exception object. Create a Message VPN Access-Level Exception object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
Message VPN access-level exceptions for members of this group.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
groupName | x | x | ||||
msgVpnName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the group. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate an Allowed Host Value object. Create an Allowed Host Value object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
A valid hostname for this broker in OAuth redirects.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
allowedHost | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAllowedHostResponse The Allowed Host Value object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Allowed Host Value object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate an Authorization Parameter object. Create an Authorization Parameter object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
Additional parameters to be passed to the OAuth authorization endpoint.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
authorizationParameterName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAuthorizationParameterResponse The Authorization Parameter object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Authorization Parameter object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate a Required Claim object. Create a Required Claim object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
Additional claims to be verified in the ID token.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
clientRequiredClaimName | x | x | ||||
clientRequiredClaimValue | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientRequiredClaimResponse The Required Claim object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Required Claim object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate a Message VPN Access-Level Exception object. Create a Message VPN Access-Level Exception object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
Default message VPN access-level exceptions.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
msgVpnName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileDefaultMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
createCreate a Required Claim object. Create a Required Claim object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
Additional claims to be verified in the access token.
Attribute | Identifying | Required | Read-Only | Write-Only | Deprecated | Opaque |
---|---|---|---|---|---|---|
oauthProfileName | x | x | ||||
resourceServerRequiredClaimName | x | x | ||||
resourceServerRequiredClaimValue | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileResourceServerRequiredClaimResponse The Required Claim object's attributes after being created, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Required Claim object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
deleteDelete an OAuth Profile object. Delete an OAuth Profile object. The deletion of instances of this object are synchronized to HA mates via config-sync.
OAuth profiles specify how to securely authenticate to an OAuth provider.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete a Group Access Level object. Delete a Group Access Level object. The deletion of instances of this object are synchronized to HA mates via config-sync.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the group. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete a Message VPN Access-Level Exception object. Delete a Message VPN Access-Level Exception object. The deletion of instances of this object are synchronized to HA mates via config-sync.
Message VPN access-level exceptions for members of this group.
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the group. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete an Allowed Host Value object. Delete an Allowed Host Value object. The deletion of instances of this object are synchronized to HA mates via config-sync.
A valid hostname for this broker in OAuth redirects.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
An allowed value for the Host header. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete an Authorization Parameter object. Delete an Authorization Parameter object. The deletion of instances of this object are synchronized to HA mates via config-sync.
Additional parameters to be passed to the OAuth authorization endpoint.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the authorization parameter. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete a Required Claim object. Delete a Required Claim object. The deletion of instances of this object are synchronized to HA mates via config-sync.
Additional claims to be verified in the ID token.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the ID token claim to verify. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete a Message VPN Access-Level Exception object. Delete a Message VPN Access-Level Exception object. The deletion of instances of this object are synchronized to HA mates via config-sync.
Default message VPN access-level exceptions.
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the message VPN. *
The name of the OAuth profile. *
Optional
xOptional context id the request is running. *
Static
deleteDelete a Required Claim object. Delete a Required Claim object. The deletion of instances of this object are synchronized to HA mates via config-sync.
Additional claims to be verified in the access token.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
SempMetaOnlyResponse The request metadata.
ApiError
The name of the OAuth profile. *
The name of the access token claim to verify. *
Optional
xOptional context id the request is running. *
Static
getGet an OAuth Profile object. Get an OAuth Profile object.
OAuth profiles specify how to securely authenticate to an OAuth provider.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
clientSecret | x | x | ||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileResponse The OAuth Profile object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a Group Access Level object. Get a Group Access Level object.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
groupName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupResponse The Group Access Level object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the group. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a Message VPN Access-Level Exception object. Get a Message VPN Access-Level Exception object.
Message VPN access-level exceptions for members of this group.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
groupName | x | |||
msgVpnName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the group. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Message VPN Access-Level Exception objects. Get a list of Message VPN Access-Level Exception objects.
Message VPN access-level exceptions for members of this group.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
groupName | x | |||
msgVpnName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupMsgVpnAccessLevelExceptionsResponse The list of Message VPN Access-Level Exception objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the group. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Group Access Level objects. Get a list of Group Access Level objects.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
groupName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupsResponse The list of Group Access Level objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet an Allowed Host Value object. Get an Allowed Host Value object.
A valid hostname for this broker in OAuth redirects.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
allowedHost | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAllowedHostResponse The Allowed Host Value object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
An allowed value for the Host header. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Allowed Host Value objects. Get a list of Allowed Host Value objects.
A valid hostname for this broker in OAuth redirects.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
allowedHost | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAllowedHostsResponse The list of Allowed Host Value objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet an Authorization Parameter object. Get an Authorization Parameter object.
Additional parameters to be passed to the OAuth authorization endpoint.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
authorizationParameterName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAuthorizationParameterResponse The Authorization Parameter object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the authorization parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Authorization Parameter objects. Get a list of Authorization Parameter objects.
Additional parameters to be passed to the OAuth authorization endpoint.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
authorizationParameterName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAuthorizationParametersResponse The list of Authorization Parameter objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a Required Claim object. Get a Required Claim object.
Additional claims to be verified in the ID token.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
clientRequiredClaimName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientRequiredClaimResponse The Required Claim object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the ID token claim to verify. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Required Claim objects. Get a list of Required Claim objects.
Additional claims to be verified in the ID token.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
clientRequiredClaimName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientRequiredClaimsResponse The list of Required Claim objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a Message VPN Access-Level Exception object. Get a Message VPN Access-Level Exception object.
Default message VPN access-level exceptions.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
msgVpnName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileDefaultMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Message VPN Access-Level Exception objects. Get a list of Message VPN Access-Level Exception objects.
Default message VPN access-level exceptions.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
msgVpnName | x | |||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileDefaultMsgVpnAccessLevelExceptionsResponse The list of Message VPN Access-Level Exception objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a Required Claim object. Get a Required Claim object.
Additional claims to be verified in the access token.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
oauthProfileName | x | |||
resourceServerRequiredClaimName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileResourceServerRequiredClaimResponse The Required Claim object's attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
The name of the access token claim to verify. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of Required Claim objects. Get a list of Required Claim objects.
Additional claims to be verified in the access token.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
oauthProfileName | x | |||
resourceServerRequiredClaimName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfileResourceServerRequiredClaimsResponse The list of Required Claim objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
getGet a list of OAuth Profile objects. Get a list of OAuth Profile objects.
OAuth profiles specify how to securely authenticate to an OAuth provider.
Attribute | Identifying | Write-Only | Deprecated | Opaque |
---|---|---|---|---|
clientSecret | x | x | ||
oauthProfileName | x |
A SEMP client authorized with a minimum access scope/level of "global/read-only" is required to perform this operation.
This has been available since 2.24.
OauthProfilesResponse The list of OAuth Profile objects' attributes, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
Optional
count?: numberLimit the count of objects in the response. See the documentation for the count
parameter. *
Optional
cursor?: stringThe cursor, or position, for the next page of objects. See the documentation for the cursor
parameter. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
where?: string[]Include in the response only objects where certain conditions are true. See the the documentation for the where
parameter. *
Optional
xOptional context id the request is running. *
Static
replaceReplace an OAuth Profile object. Replace an OAuth Profile object. Any attribute missing from the request will be set to its default value, subject to the exceptions in note 4.
OAuth profiles specify how to securely authenticate to an OAuth provider.
Attribute | Identifying | Const | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|---|
clientSecret | x | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation. Requests which include the following attributes require greater access scope/level:
Attribute | Access Scope/Level |
---|---|
accessLevelGroupsClaimName | global/admin |
clientId | global/admin |
clientRedirectUri | global/admin |
clientRequiredType | global/admin |
clientScope | global/admin |
clientSecret | global/admin |
clientValidateTypeEnabled | global/admin |
defaultGlobalAccessLevel | global/admin |
displayName | global/admin |
enabled | global/admin |
endpointAuthorization | global/admin |
endpointDiscovery | global/admin |
endpointDiscoveryRefreshInterval | global/admin |
endpointIntrospection | global/admin |
endpointIntrospectionTimeout | global/admin |
endpointJwks | global/admin |
endpointJwksRefreshInterval | global/admin |
endpointToken | global/admin |
endpointTokenTimeout | global/admin |
endpointUserinfo | global/admin |
endpointUserinfoTimeout | global/admin |
interactiveEnabled | global/admin |
interactivePromptForExpiredSession | global/admin |
interactivePromptForNewSession | global/admin |
issuer | global/admin |
oauthRole | global/admin |
resourceServerParseAccessTokenEnabled | global/admin |
resourceServerRequiredAudience | global/admin |
resourceServerRequiredIssuer | global/admin |
resourceServerRequiredScope | global/admin |
resourceServerRequiredType | global/admin |
resourceServerValidateAudienceEnabled | global/admin |
resourceServerValidateIssuerEnabled | global/admin |
resourceServerValidateScopeEnabled | global/admin |
resourceServerValidateTypeEnabled | global/admin |
sempEnabled | global/admin |
usernameClaimName | global/admin |
This has been available since 2.24.
OauthProfileResponse The OAuth Profile object's attributes after being replaced, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The OAuth Profile object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
replaceReplace a Group Access Level object. Replace a Group Access Level object. Any attribute missing from the request will be set to its default value, subject to the exceptions in note 4.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
Attribute | Identifying | Const | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|---|
groupName | x | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation. Requests which include the following attributes require greater access scope/level:
Attribute | Access Scope/Level |
---|---|
globalAccessLevel | global/admin |
This has been available since 2.24.
OauthProfileAccessLevelGroupResponse The Group Access Level object's attributes after being replaced, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Group Access Level object's attributes. *
The name of the group. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
replaceReplace a Message VPN Access-Level Exception object. Replace a Message VPN Access-Level Exception object. Any attribute missing from the request will be set to its default value, subject to the exceptions in note 4.
Message VPN access-level exceptions for members of this group.
Attribute | Identifying | Const | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|---|
groupName | x | x | |||||
msgVpnName | x | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being replaced, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the group. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
replaceReplace an Authorization Parameter object. Replace an Authorization Parameter object. Any attribute missing from the request will be set to its default value, subject to the exceptions in note 4.
Additional parameters to be passed to the OAuth authorization endpoint.
Attribute | Identifying | Const | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|---|
authorizationParameterName | x | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAuthorizationParameterResponse The Authorization Parameter object's attributes after being replaced, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the authorization parameter. *
The Authorization Parameter object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
replaceReplace a Message VPN Access-Level Exception object. Replace a Message VPN Access-Level Exception object. Any attribute missing from the request will be set to its default value, subject to the exceptions in note 4.
Default message VPN access-level exceptions.
Attribute | Identifying | Const | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|---|
msgVpnName | x | x | |||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileDefaultMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being replaced, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
updateUpdate an OAuth Profile object. Update an OAuth Profile object. Any attribute missing from the request will be left unchanged.
OAuth profiles specify how to securely authenticate to an OAuth provider.
Attribute | Identifying | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|
clientSecret | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation. Requests which include the following attributes require greater access scope/level:
Attribute | Access Scope/Level |
---|---|
accessLevelGroupsClaimName | global/admin |
clientId | global/admin |
clientRedirectUri | global/admin |
clientRequiredType | global/admin |
clientScope | global/admin |
clientSecret | global/admin |
clientValidateTypeEnabled | global/admin |
defaultGlobalAccessLevel | global/admin |
displayName | global/admin |
enabled | global/admin |
endpointAuthorization | global/admin |
endpointDiscovery | global/admin |
endpointDiscoveryRefreshInterval | global/admin |
endpointIntrospection | global/admin |
endpointIntrospectionTimeout | global/admin |
endpointJwks | global/admin |
endpointJwksRefreshInterval | global/admin |
endpointToken | global/admin |
endpointTokenTimeout | global/admin |
endpointUserinfo | global/admin |
endpointUserinfoTimeout | global/admin |
interactiveEnabled | global/admin |
interactivePromptForExpiredSession | global/admin |
interactivePromptForNewSession | global/admin |
issuer | global/admin |
oauthRole | global/admin |
resourceServerParseAccessTokenEnabled | global/admin |
resourceServerRequiredAudience | global/admin |
resourceServerRequiredIssuer | global/admin |
resourceServerRequiredScope | global/admin |
resourceServerRequiredType | global/admin |
resourceServerValidateAudienceEnabled | global/admin |
resourceServerValidateIssuerEnabled | global/admin |
resourceServerValidateScopeEnabled | global/admin |
resourceServerValidateTypeEnabled | global/admin |
sempEnabled | global/admin |
usernameClaimName | global/admin |
This has been available since 2.24.
OauthProfileResponse The OAuth Profile object's attributes after being updated, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The OAuth Profile object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
updateUpdate a Group Access Level object. Update a Group Access Level object. Any attribute missing from the request will be left unchanged.
The name of a group as it exists on the OAuth server being used to authenticate SEMP users.
Attribute | Identifying | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|
groupName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation. Requests which include the following attributes require greater access scope/level:
Attribute | Access Scope/Level |
---|---|
globalAccessLevel | global/admin |
This has been available since 2.24.
OauthProfileAccessLevelGroupResponse The Group Access Level object's attributes after being updated, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Group Access Level object's attributes. *
The name of the group. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
updateUpdate a Message VPN Access-Level Exception object. Update a Message VPN Access-Level Exception object. Any attribute missing from the request will be left unchanged.
Message VPN access-level exceptions for members of this group.
Attribute | Identifying | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|
groupName | x | x | ||||
msgVpnName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileAccessLevelGroupMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being updated, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the group. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
updateUpdate an Authorization Parameter object. Update an Authorization Parameter object. Any attribute missing from the request will be left unchanged.
Additional parameters to be passed to the OAuth authorization endpoint.
Attribute | Identifying | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|
authorizationParameterName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
OauthProfileClientAuthorizationParameterResponse The Authorization Parameter object's attributes after being updated, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The name of the authorization parameter. *
The Authorization Parameter object's attributes. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Static
updateUpdate a Message VPN Access-Level Exception object. Update a Message VPN Access-Level Exception object. Any attribute missing from the request will be left unchanged.
Default message VPN access-level exceptions.
Attribute | Identifying | Read-Only | Write-Only | Requires-Disable | Deprecated | Opaque |
---|---|---|---|---|---|---|
msgVpnName | x | x | ||||
oauthProfileName | x | x |
A SEMP client authorized with a minimum access scope/level of "global/read-write" is required to perform this operation.
This has been available since 2.24.
OauthProfileDefaultMsgVpnAccessLevelExceptionResponse The Message VPN Access-Level Exception object's attributes after being updated, and the request metadata.
SempMetaOnlyResponse The error response.
ApiError
The Message VPN Access-Level Exception object's attributes. *
The name of the message VPN. *
The name of the OAuth profile. *
Optional
opaqueAccept opaque attributes in the request or return opaque attributes in the response, encrypted with the specified password. See the documentation for the opaquePassword
parameter. *
Optional
select?: string[]Include in the response only selected attributes of the object, or exclude from the response selected attributes of the object. See the documentation for the select
parameter. *
Optional
xOptional context id the request is running. *
Create an OAuth Profile object. Create an OAuth Profile object. Any attribute missing from the request will be set to its default value. The creation of instances of this object are synchronized to HA mates via config-sync.
OAuth profiles specify how to securely authenticate to an OAuth provider.
A SEMP client authorized with a minimum access scope/level of "global/admin" is required to perform this operation.
This has been available since 2.24.
Returns
OauthProfileResponse The OAuth Profile object's attributes after being created, and the request metadata.
Returns
SempMetaOnlyResponse The error response.
Throws
ApiError