JUMP TOOAuth and OIDCOpenID ConnectGet provider's metadata.getAuthorize the user to use OIDC.getAuthorize the user to use OIDC.postCreate a dynamic client.postRead a dynamic client.getDelete a dynamic client.deleteAuthorize device to use OIDC.postIntrospect the token.postGet the provider's JSON Web Key Set (JWKS).getRevoke the token.postGet the access token.postRetrieve user informationgetRetrieve user informationpostOpenID Connect API v2Get provider's metadatagetAuthorize the user to use OIDC.getAuthorize the user to use OIDC.postGet the access token.postPushed Authorization Requests (PAR).postIntrospect the tokenpostRetrieve user informationgetRetrieve user informationpostRevoke the token.postCreate a dynamic client.postRead a dynamic client.getDelete a dynamic client.deleteUsers & GroupsAccount expiration configurationRetrieve the global configuration for attribute mapping that can be overridden in individual identity providers.getSet the account expiration config.putPassword Policy Management 2.0Get the password policy for a specified tenant.getUpdate the password policy for a specified tenant.putUsers Management Version 2.0The bulk request that clients use to send a potentially large collection of resource operations in a single request. For a PUT, PATCH, or POST, the data in the operation is the resource data as for a single SCIM request.postDelete users for the specified tenant from a (CSV) file.postGet the list of supported header names.getImport users for the specified tenant from a comma separated value (CSV) file.postRetrieves a list of CSV import requests that belong to the specified tenant.getRetrieves the details of a CSV import request that belong to the specified tenant.getCancels a CSV import request for the specified tenant.putDeletes a CSV import request from the specified tenant.deleteRetrieves the account details of the authenticated user in Cloud Directory.getReplaces the authenticated user's attributes in Cloud Directory.putDelete the authenticated user's Cloud Directory account.deleteRetrieves the authenticated user's effective password policy.getRetrieves the authenticated user's translated labels for their effective password policy.getChange the authenticated user's password.postRetrieves a list of a manager's reportees that belong to a specified tenant and match the search filter criteria.getRetrieves the SCIM capabilities enabled for the tenant.getRetrieves a list of users that belong to a specified tenant and match the search filter criteria.getCreates a user in Cloud Directory.postAuthenticate a user name and password.postRetrieves the total number of users under a tenant in the Cloud Directory.getRetrieves the details of a user in Cloud Directory for a tenant.getReplaces the user's attributes in Cloud Directory.putDeletes a user from a specified tenant in Cloud Directory.deleteModify a user's attributes in Cloud Directory. It can be used to update one or more attributes.patchCompare a clear text value to a custom hashed attribute value for a user.postReset a user's password.patchGroups Management Version 2.0Import groups for the specified tenant from a comma separated value (CSV) file.postRetrieves a list of groups that belong to the specified tenant and match the search criteria.getCreates a group for a specified tenant.postRetrieves the total number of groups under a tenant in the Cloud Directory.getRetrieves the details of a group for a specified tenant.getUpdates the group's attributes for a specified tenant.putDelete a group from a specified tenant.deleteThis API is used to modify a group's attributes. It can be used to update one or more attributes.patchUser Self Care APIInitiate a reset password request by using an authentication mechanism.postReset the user's forgotten password.putValidates the authentication attempt that is associated with the current step in the reset password flow.postInitiate a forgot username request by using an authentication mechanism.postRecover the user's forgotten user name.putValidates the authentication attempt that is associated with the current step in the username recovery flow.postAttribute managementAttributesRetrieves the list of attribute functions that are configured for the specified tenantgetLists all attributesgetCreates an attributepostBulk management operations of attributespatchGets the list of existing attribute tagsgetGets an attributegetModifies an attributeputDeletes an attributedeleteModifies selected properties of an attributepatchReverts a global attribute to the default configurationputApplication managementApplication AccessGets the list of all the operations that are performed on accounts of this tenant.getRetry a list of failed operations.postGets details of the specified operationgetRetry a failed operationpostGets the list of all applications that were onboarded by tenant administrator.getCreates an instance of an application for a tenant.postChecks if the identity source is configured with an application.getCreate custom rule.postGet rule definition.getUpdate custom rule.putGets the summary stats of all applications for a given tenant.getGets the details of an application.getUpdates an application.putDeletes the application that is specified by the application ID.deleteGets the list of accounts for the specified application.getRemediate Non-Compliant accounts for an application.postGet the account attributes of given account associated with an application.getGet attribute values delta for an account for the application.getSuspend/Restore/Orphan/Unmanage/deprovision an Account identified by this applicationId, userId.postStart / Stop Account Synchronization.postGet Last run reconciliation status for an application.getGets adoption stats details of account synchronization for an application.getStop given account synchronization of an application.postGets the Application account list details for specified account synchronization id.getRetrieves all supporting data for a given application.getProvides mechanism to adopt an Orphan accountpostRetrieves a list of application ids that have the specified auth policy id attached.getSearches for the applications of an owner.getFetches the details of an application accessible to owner.getUpdates the attributes of an application accessible to the owner.putFetches the entitlements of an application.getUpdates entitlements to an application.postGet All account synchronization status for all applications of given tenant.getGets all operations performed in an Account Sync operationgetFetches the applications that are entitled to a user.getAPI to determine if a user is entitled to an application.postEntitlement ManagementGet the rights values associated to an assignment.getUpdate the rights values of an assignment.patchCreates a new entitlement.postSearch the assignments.postGrant or revoke one or more entitlements to a group.postGet the list of user added to or removed from dynamic entitlement.postSearch the entitlements.postGrant or revoke one or more entitlements to a user.postGet the entitlement details.getGrant or revoke an entitlement to one or more users and groups.postDelete an entitlement.deleteUpdate an entitlement.patchFind the children of an entitlement.getAdd or remove one or more children for an entitlement.postUpdate the rights values of a role.patchPublish or discard an entitlement.patchGet the entitlements granted to a group.getGet the entitlements granted to the logged user.getCheck if a user is granted to an application.getCheck if a user is granted to an application.postGet all the applications that are granted to a user.getGet the entitlements that are granted to a user.getGet the right values of a permission assigned to a user.getAuthenticationIdentity SourcesRetrieve all the identity source instances of the tenant.getCreate an identity source instance for a tenant.postRetrieve all the identity source instances of the tenant that use the passord policy ID's specified in the 'search' query parameter.getRetrieve all the identity source instances of the tenant that have this property name and value.getRetrieve the details of a particular identity source instance of the tenant with the specified instance ID.getUpdate an identity source instance of the tenant with the specified instance ID.putDelete an identity source instance of the tenant with the specified instance ID.deleteIdentity Source TypesRetrieve the details of all the identity source types.getRetrieve the details of a particular identity source types.getRetrieve the metadata of a particular SAML Enterprise.getAuthentication Token ExchangeExchange a valid bearer token for an authenticated browser sessiongetAuthentication Manage User SessionsDelete random session for the user.deleteSocial JWT ExchangeExchange a valid social JWT for an IBM Security Verify access token.postFIDO ConfigurationRetrieve the list of metadata entries.getCreate a metadata entry.postRetrieve a metadata entry.getUpdate a metadata entry.putDelete a metadata entry.deleteRetrieve the list of relying party configurations.getCreate a relying party configuration.postRetrieve a relying party configuration.getUpdate a relying party configuration.putDelete a relying party configuration.deleteQR Code Login ConfigurationRetrieve the QR code login configuration.getUpdate the QR code login configuration.putreCAPTCHARetrieve the list of reCAPTCHA configurationsgetCreate a reCAPTCHA configurationpostRetrieve a reCAPTCHA configurationgetUpdate a reCAPTCHA configurationputDelete a reCAPTCHA configurationdeleteFIDORetrieve the list of FIDO registrations.getRetrieve a FIDO registration.getUpdate a FIDO registration.putDelete a FIDO registration.deleteResolve an rpId.postInitiate a FIDO authentication.postComplete a FIDO authentication.postInitiate a FIDO registration.postComplete a FIDO registration.postQR Code LoginCreate a QR code login verification.getRetrieve a QR code login verification.getAttempt a QR code login verification.postCancel a QR code login verification.deletePassword AuthenticationRetrieve the list of valid password based identity sources.getChange a user's password for an on-premise identity source.putAttempt password authentication with an identity source.postReset a user's password for an on-premise identity source.postMulti-factor authenticationAuthentication Factors 2.0Retrieve the list of authentication factor enrollments.getDiscover the availability of all authentication factors.getDiscover the availability of an authentication factor.getEmail One-time Password 2.0Retrieve the list of email one-time password enrollments.getCreate a email one-time password enrollment.postCreate a transient email one-time password verification.postRetrieve a transient email one-time password verification.getAttempt a transient email one-time password verification.postCancel a transient email one-time password verification.deleteRetrieve a email one-time password enrollment.getUpdate a email one-time password enrollment.putDelete a email one-time password enrollment.deleteCreate a email one-time password verification.postRetrieve a email one-time password verification.getAttempt a email one-time password verification.postCancel a email one-time password verification.deleteOne-time PasswordCreate a one-time password verification.postRetrieve a one-time password verification.getAttempt a one-time password verification.postCancel a one-time password verification.deleteKnowledge QuestionsRetrieve the list of knowledge question enrollments.getCreate a knowledge question enrollment.postRetrieve a knowledge question enrollment.getUpdate a knowledge question enrollment.putDelete a knowledge question enrollment.deleteCreate a knowledge question verification.postRetrieve a knowledge question verification.getAttempt a knowledge question verification.postDelete a knowledge question verification.deleteSMS One-time Password 2.0Retrieve the list of SMS one-time password enrollments.getCreate a SMS one-time password enrollment.postCreate a transient SMS one-time password verification.postRetrieve a transient SMS one-time password verification.getAttempt a transient SMS one-time password verification.postCancel a transient SMS one-time password verification.deleteRetrieve a SMS one-time password enrollment.getUpdate a SMS one-time password enrollment.putDelete a SMS one-time password enrollment.deleteCreate a SMS one-time password verification.postRetrieve a SMS one-time password verification.getAttempt a SMS one-time password verification.postCancel a SMS one-time password verification.deleteTime-based One-time Password 2.0Retrieve the list of time-based one-time password enrollments.getCreate a time-based one-time password enrollment.postRetrieve a time-based one-time password enrollment.getUpdate a time-based one-time password enrollment.putAttempt a time-based one-time password verification.postDelete a time-based one-time password enrollment.deleteVoice One-time PasswordRetrieve the list of voice one-time password enrollments.getCreate a voice one-time password enrollment.postCreate a transient voice one-time password verification.postRetrieve a transient voice one-time password verification.getAttempt a transient voice one-time password verification.postCancel a transient voice one-time password verification.deleteRetrieve a voice one-time password enrollment.getUpdate a voice one-time password enrollment.putDelete a voice one-time password enrollment.deleteCreate a voice one-time password verification.postRetrieve a voice one-time password verification.getAttempt a voice one-time password verification.postCancel a voice one-time password verification.deleteAuthenticatorsRetrieve the list of registered authenticators.getRetrieve the list of available authenticator clients.getInitiate an authenticator registration.postComplete or refresh an authenticator registration.postRetrieve a specific authenticator registration.getUpdate the editable attributes of a specific authenticator registration.putDelete a specific authenticator registration.deleteUpdate the editable attributes of a specific authenticator registration.patchRetrieve the list of verification transactions.getInitiate a verification transaction.postRetrieve a specific verification transaction.getComplete a specific verification transaction.postSignature AuthenticationRetrieve the list of signature enrollments.getEnroll a signature authentication method.postRetrieve a specific signature enrollment.getUpdate the editable attributes of a specific signature enrollment.putDelete a specific signature enrollment.deleteUpdate the editable attributes of a specific signature enrollment.patchFederationIdentity Provider Attribute MappingsRetrieve the global configuration for attribute mapping that can be overridden in individual identity providers.getSet the global attribute mappings for identity sources.putOpenID Connect Grant ManagementRetrieves the list of OIDC grants.getBulk delete, disable, or enable OIDC grants.patchRetrieves a specific OIDC grant.getDeletes a specific OIDC grant.deleteRetrieves the list of OIDC grants.getBulk delete, disable, or enable OIDC grants.patchRetrieves a specific OIDC grant.getDeletes a specific OIDC grant.deleteRetrieves the list of OIDC grants.getBulk delete, disable, or enable OIDC grants.patchRetrieves a specific OIDC grant.getDeletes a specific OIDC grant.deleteOpenID Connect Dynamic Client ProfileRead dynamic client profile.getUpdate dynamic client profile.putOpenID Connect FederationRetrieves the OpenID Connect federation configuration.getUpdates the OpenID Connect federation configuration.putSAML 2.0 Alias ManagementRetrieves the list of aliasesgetRetrieves a specific aliasgetDeletes a specific aliasdeleteRetrieves the list of aliases belonging to usergetRetrieves a specific alias belonging to usergetDeletes a specific alias belonging to userdeleteSAML 2.0 Federations ManagementGet all FederationsgetGet a FederationgetUpdate a FederationputExports a federation metadatagetWS Federation ManagementEnable WS-Federation audit trace for the tenantpostEnable WS-Federation audit tracepostAccess & Risk PoliciesAccess Policy Management V5.0retrieve access policiesgetcreate an access policypostretrieve a access policygetupdate a access policyputcreate an access policy revisionpostdelete an access policydeleteretrieve the revisions for an access policygetretrieve a revision for an access policygetupdate a access policy revisionputdelete an access policy revisiondeleteBranding & customizationCustomization - ThemesReset customizationsdeleteList all the themesgetRegister a new themepostDownload theme-based templatesgetUpdate a theme registrationputDelete a theme registrationdeleteDownload a specific template file from a themegetUpdate a specific template file for a themeputDeletes a customization for a specific template file in a themedeleteLifecycle & GovernanceAdapter ManagementGet all custom profiles in system.getCreate draft in system.postList all profiles using the attribute.getGet details of the specified profilegetUpdate draft in system.putDelete specified profiledeleteGet all profiles in system for a tenant with a given template id.getGet webui template in the system for a given profile id and template id.getPublish the profilepostCertification Campaign statisticsRetrieve statistics of specific assignments.getRetrieve campaign statistics.getRetrieve statistics of specific campaign instances.getRetrieve statistics of specific assignments within a given instance.getRetrieve statistics of specific assignments.getRetrieve statistics of specific campaign instances.getRetrieve statistics of specific assignments within a given instance.getCertification Campaign assignmentsRetrieve a specific assignment.getModify a given assignment.putAdd new assignments to a continuous campaign.postAdd new assignments to a continuous campaign instance.postModify a given set of assignments.patchRefresh assignments in a continuous campaign.postRetrieve all assignments in a given campaign instancegetRetrieve all assignments in a given campaign instance.postRetrieve a specific assignment.getModify a given assignment.putModify a given set of assignments.patchRetrieve all assignments, in a given campaign instance.getRetrieve all assignments in a given campaign instance.postCertification Campaign configurationsRetrieve the campaign configurations.getCreate a campaign configuration.postEdit campaign configurations.patchRetrieve a specific campaign configuration.getEdit specific campaign configuration.putDelete specific campaign configuration.deleteCertification Campaign instancesRetrieve instances corresponding to a specific campaign configuration.getRetrieve campaign instances.getModify campaign instances.patchRetrieve a specific campaign instance.getModify specific campaign instance.putCreate a preview campaign.postRetrieve instances corresponding to a specific campaign configuration.getRetrieve campaign instances.getRetrieve specific campaign instance.getProvisioning ManagementGet provisioning policy for an application.getUpdate provisioning policy for an application. In addition resends all events for the application.putCreate a provisioning policy for an applicatication. Provisioning policy enables or disables publishing of provisioning events for the application.postDelete provisioning policy for an application.deleteAccess Request Management V1.0Get details of specified requestable access.getGet the requestable access list for self.postDelete a request by iddeleteDelete all the requests that are filtered by one or more query parameters.deleteSearch requests of an approvergetGet statistical view of requests for approvalgetGet statistical summary of requests for approvalgetExecute actions for a list of requestspostSearch the requestsgetCreate a requestpostGet statistical view of requestsgetGet the summary of request statisticsgetGet request detailsgetAdd a justificationpostSend a reminder to all approvers of a requestpostCreate a fine grained access requestspostCancel a list of requestspostDeprecated - Search the self requestsgetCreate a self requestpostDeprecated - Get statistical view of self requestsgetDeprecated - Get the summary of self request statisticsgetDeprecated - Create a fine grained access request for selfpostDeprecated - Cancel a list of requestspostFind all requestable applications in the catalog.getFind a workflow configuration.getFind a workflow configuration by ID.getReplace an existing workflow configuration.putDelete a workflow configuration.deleteIdentity agentsAgent Bridge Support ServiceRetrieve agent configurations.getCreate an agent configuration.postRetrieve corrupted agent configuration(s) which can't be decrypted due to missing certificategetRetrieve a specific agent's configuration.getUpdate a specific agent configuration.putDelete an agent configuration.deleteRetrieve the API Client credentials.getData privacy & consentData Privacy and ConsentCreate or update a consent record.postBulk create or patch consent records.patchPresents the data subject information to the user.postProvides the data usage approval.postData Privacy and Consent ManagementRetrieve a list of consent records.getBulk delete consent records.patchRetrieve a specific consent record.getDelete a specific consent record from a tenant.deleteEvent analytics & reportsEventsGet all events for a tenant.getReportsExport reports for a specified tenant into CSV file.postRun a report.postAuthentication ConfigurationEmail One-time Password Configuration 2.0Retrieve the email one-time password configuration.getUpdate the email one-time password configuration.putOne-time Password Configuration 2.0Retrieve the one-time password configuration.getUpdate the one-time password configuration.putKnowledge Questions ConfigurationRetrieve the list of knowledge questions configuration profiles.getRetrieve a knowledge questions configuration profile.getUpdate a knowledge questions configuration profile.putSMS One-time Password Configuration 2.0Retrieve the SMS one-time password configuration.getUpdate the SMS one-time password configuration.putTime-based One-time Password Configuration 2.0Retrieve the time-based one-time password configuration.getUpdate the time-based one-time password configuration.putVoice One-time Password ConfigurationRetrieve the voice one-time password configuration.getUpdate the voice one-time password configuration.putAuthenticator ClientsRetrieve the list of authenticator clients.getCreate an authenticator client.postRetrieve a specific authenticator client.getUpdate the editable attributes of a specific authenticator client.putDelete a specific authenticator client.deleteUpdate the editable attributes of a specific authenticator client.patchRetrieve the metadata of a specific authenticator client.getUpdate the metadata attributes of an authenticator client.putUpdate the metadata attributes of an authenticator client.patchSignature Authentication ConfigurationRetrieve the signature authentication methods configuration.getUpdate the signature authentication method configuration.putUpdate the signature authentication methods configuration.patchGeneral configurationAPI ClientsLists the API ClientsgetCreate an API ClientpostBulk deletes the API clientspatchGets a specific API clientgetUpdates a specific API clientputDeletes an API clientdeleteGets a YAML response that contains the credentials for a specific client.getSession Exchange ConfigurationRetrieve the configuration for session exchange.getSet the session exchange config.putTenant Properties API 2.0Retrieves a list of tenant properties for the specified tenant.getReplaces the tenant properties for the specified tenant.putAdmin Entitlement ManagementCreate an admin entitlement.postGet the list of admin assignments.postGrant or revoke one or more admin entitlements to a group.postGet the list of user added to or removed from dynamic admin entitlement.postGet the list of admin entitlements.postGrant or revoke one or more admin entitlements to a user.postGet an admin entitlement.getGrant or revoke an admin entitlement to one or more users and groups.postDelete an admin entitlement.deleteUpdate an admin entitlement.patchGet the children of an admin entitlement.getAdd or remove one or more children for an admin entitlement.postPublish or discard an admin entitlement.patchFind the admin entitlements that are granted to a group.getFind the admin entitlements that are granted to the user that is logged in.getFind the admin entitlements that are granted to a user.getCertificatesGets the list of personal certificates.getImport or generate a personal certificate.postGet a single personal certificate with the specified label.getUpdate a personal certificate.putDelete a personal certificate.deleteGets the list of signer certificates.getImports a signer certificate.postGets the signer certificate with the given label.getDelete a signer certificate.deletePush Credentials ManagementGet all the sets of configured mobile push provider credentials.getCreate a set of mobile push provider credentials.postGet a specific set of configured mobile push provider credentials.getUpdate a specific set of configured mobile push provider credentials.putDelete a specific set of configured mobile push provider credentials.deletePassword VaultPassword Vault ConfigurationRetrieve the password vault configuration.getUpdate the password vault configuration.putPassword VaultRetrieve a password vault enrollment.getUpdate a password vault enrollment.putDelete a password vault enrollment.deleteRetrieve a password vault resource.getUpdate a password vault resource.putDelete a password vault resource.deleteDeprecated APIsDeprecated - Attribute Evaluation. Replaced by /v2.0/attributequery.Deprecated - Preview the value that would be computed for this attribute.postAccess Policy Management v3.0 (deprecated)Deprecated - Retrieve list of tenant policies.getDeprecated - Create a custom policy for tenant.postDeprecated - Retrieve the details of a particular policy specified with id.getDeprecated - Update the policy instance of tenant with specified id.putDeprecated - Delete custom policy of tenant with specified id.deleteOpenID Connect Consent Management (deprecated)Deprecated - Retrieves the list of OIDC consents.getDeprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patchDeprecated - Retrieves a specific OIDC consent.getDeprecated - Deletes a specific OIDC consent.deleteDeprecated - Retrieves the list of OIDC consents.getDeprecated - Bulk delete OIDC consents.patchDeprecated - Retrieves a specific OIDC consent.getDeprecated - Deletes a specific OIDC consent.deleteDeprecated - Retrieves the list of OIDC consents.getDeprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patchDeprecated - Retrieves a specific OIDC consent.getDeprecated - Deletes a specific OIDC consent.deleteDeprecated - Bulk scope/entitlement removal of OIDC consents.patchIBM Security Verify APITenant policy configurationRetrieve the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedgetSet the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedputExternal MFA ProvidersRetrieve the list of external MFA provider configurations.getCreate an external MFA provider configuration.postRetrieve an external MFA provider configuration.getUpdate an external MFA provider configuration.putDelete an external MFA provider configuration.deleteRetrieve the list of external MFA providers.getRetrieve the list of enrollments for an external MFA provider.getAction an authentication attempt via an external MFA provider.postClears all cached enrollments of specific user for an external MFA providerdeleteRetrieve the status of an authentication attempt.getContinue an authentication attempt via an external MFA provider.postRetrieve the list of enrollments for all external MFA providers.getAccess ManagementFind the children of an entitlement either requestable or requested or granted to self.getGet user access assignments in active and fulfillment failed state.postGet user access assignments statistics.getFetch the access assignments of specific user.postFind the children of an application entitlement either requestable or requested or granted to a specific user.getDevice manager configurationLists device managersgetCreate a device manager configuration.postTest a device manager connectionpostGet trusted certificates as a zip file.getGet a device-managergetUpdate a device manager configurationputDelete a device manager configuration.deletePATCH a device manager configuration.patchTest a device manager connectionputLists device informationgetDelete user devicedeleteLists your own device informationgetDeletes your own devicedeleteLists uniqueuseridentifiersgetSmartcard and other X.509 certificate provider configurationLists smartcard and other X.509 certificate providers.getCreate a smartcard and other X.509 certificate provider.postLists attributes and uniqueUserIdentifiers for a X.509 compliant certificate.getGet a smartcard and other X.509 certificate providersgetUpdate a smartcard or X.509 certificate provider.putDelete a smartcard or X.509 certificate providerdeleteUpdate a smartcard or X.509 certificate provider with PATCHpatchSmartcard or certificate provider operationsRemove smartcard/X.509 certificate provider certificates for a specified user id.deleteWebhook-ConfigurationList WebhooksgetCreate a WebhookpostPreflight a webhook configurationpostPreflight a webhook configurationpostList Webhook PurposesgetDevelop an transformpostFetch a WebhookgetUpdate a WebhookputDelete a webhhookdeleteFetch webhook dead lettersgetRemove webhook dead lettersdeleteView the total number of deadletters a webhookgetView the state of a deadletter reconciliationgetInitiate a reconciliation of deadletterspostRetrieve a dead lettergetRemove a dead letterdeleteGet webhook healthgetCurrent webhook statusgetTest a configured webhookgetTests a resource of a configured webhookgetGrant or revoke an admin entitlement to one or more users and groups.post https://{tenanturl}/v1.0/admin/entitlements/{entitlement}Entitlements required: tenantadmin [Tenant Administrator].
