OAuth and OIDC

OpenID Connect
OpenID Connect API v2

Users & Groups

Account expiration configuration
- Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
- Set the account expiration config.put
Password Policy Management 2.0
- Get the password policy for a specified tenant.get
- Update the password policy for a specified tenant.put
Users Management Version 2.0
Groups Management Version 2.0
User Self Care API

Attribute management

Attributes

Application management

Application Access
Entitlement Management

Authentication

Identity Source Types
Authentication Token Exchange
- Exchange a valid bearer token for an authenticated browser sessionget
- Exchange a valid bearer token for an authenticated browser sessionpost
Authentication Manage User Sessions
Social JWT Exchange
- Exchange a valid social JWT for an IBM Security Verify access token.post
FIDO Configuration
QR Code Login Configuration
- Retrieve the QR code login configuration.get
- Update the QR code login configuration.put
reCAPTCHA
FIDO
QR Code Login
Password Authentication

Multi-factor authentication

Authentication Factors 2.0
Email One-time Password 2.0
One-time Password
Knowledge Questions
SMS One-time Password 2.0
Time-based One-time Password 2.0
Voice One-time Password
Authenticators
Signature Authentication

Federation

Identity Provider Attribute Mappings
- Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
- Set the global attribute mappings for identity sources.put
OpenID Connect Grant Management
OpenID Connect Dynamic Client Profile
- Read dynamic client profile.get
- Update dynamic client profile.put
OpenID Connect Federation
- Retrieves the OpenID Connect federation configuration.get
- Updates the OpenID Connect federation configuration.put
SAML 2.0 Alias Management
SAML 2.0 Federations Management
WS Federation Management
- Enable WS-Federation audit trace for the tenantpost
- Enable WS-Federation audit tracepost

Access & Risk Policies

Access Policy Management V5.0

Branding & customization

Template File Registration
Customization - Themes

Lifecycle & Governance

Adapter Management
Provisioning Management
Access Request Management V1.0

Identity agents

Agent Bridge Support Service

Data privacy & consent

Data Privacy and Consent
Data Privacy and Consent Management

Event analytics & reports

Events
- Get all events for a tenant.get
Reports

Authentication Configuration

Email One-time Password Configuration 2.0
- Retrieve the email one-time password configuration.get
- Update the email one-time password configuration.put
One-time Password Configuration 2.0
- Retrieve the one-time password configuration.get
- Update the one-time password configuration.put
Knowledge Questions Configuration
SMS One-time Password Configuration 2.0
- Retrieve the SMS one-time password configuration.get
- Update the SMS one-time password configuration.put
Time-based One-time Password Configuration 2.0
- Retrieve the time-based one-time password configuration.get
- Update the time-based one-time password configuration.put
Voice One-time Password Configuration
- Retrieve the voice one-time password configuration.get
- Update the voice one-time password configuration.put
Authenticator Clients
Signature Authentication Configuration

General configuration

API Clients
Session Exchange Configuration
- Retrieve the configuration for session exchange.get
- Set the session exchange config.put
Tenant Properties API 2.0
- Retrieves a list of tenant properties for the specified tenant.get
- Replaces the tenant properties for the specified tenant.put
Admin Entitlement Management
Certificates
Push Credentials Management

Password Vault

Password Vault Configuration
- Retrieve the password vault configuration.get
- Update the password vault configuration.put
Password Vault

Deprecated APIs

Deprecated - Attribute Evaluation. Replaced by /v2.0/attributequery.
- Deprecated - Preview the value that would be computed for this attribute.post
Access Policy Management v3.0 (deprecated)
OpenID Connect Consent Management (deprecated)

IBM Security Verify API

Tenant policy configuration
- Retrieve the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedget
- Set the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedput
Identity Sources V1 - Deprecated
Identity Sources V2
Certification Campaign assignments v2.0
Certification Campaign configurations v2.0
Certification Campaign instances v2.0
Certification Campaign statistics v2.0
Certification Campaign assignments v1.0 - Deprecated
Certification Campaign configurations v1.0 - Deprecated
Certification Campaign instances v1.0 - Deprecated
Certification Campaign statistics v1.0 - Deprecated
Dictionary Policy Management 3.0
Password Dictionary Management 3.0
Password Policy Management 3.0
FIDO MDS Configuration
External MFA Providers
Well-Known Uniform Resource Identifiers
Access Management
Device manager configuration
Smartcard and other X.509 certificate provider configuration
Smartcard or certificate provider operations
- Remove smartcard/X.509 certificate provider certificates for a specified user id.delete
OpenID Connect Token Types
Threat Insights Configurations API
Webhook-Configuration

OAuth and OIDC

OpenID Connect
OpenID Connect API v2

Users & Groups

Account expiration configuration
- Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
- Set the account expiration config.put
Password Policy Management 2.0
- Get the password policy for a specified tenant.get
- Update the password policy for a specified tenant.put
Users Management Version 2.0
Groups Management Version 2.0
User Self Care API

Attribute management

Attributes

Application management

Application Access
Entitlement Management

Authentication

Identity Source Types
Authentication Token Exchange
- Exchange a valid bearer token for an authenticated browser sessionget
- Exchange a valid bearer token for an authenticated browser sessionpost
Authentication Manage User Sessions
Social JWT Exchange
- Exchange a valid social JWT for an IBM Security Verify access token.post
FIDO Configuration
QR Code Login Configuration
- Retrieve the QR code login configuration.get
- Update the QR code login configuration.put
reCAPTCHA
FIDO
QR Code Login
Password Authentication

Multi-factor authentication

Authentication Factors 2.0
Email One-time Password 2.0
One-time Password
Knowledge Questions
SMS One-time Password 2.0
Time-based One-time Password 2.0
Voice One-time Password
Authenticators
Signature Authentication

Federation

Identity Provider Attribute Mappings
- Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
- Set the global attribute mappings for identity sources.put
OpenID Connect Grant Management
OpenID Connect Dynamic Client Profile
- Read dynamic client profile.get
- Update dynamic client profile.put
OpenID Connect Federation
- Retrieves the OpenID Connect federation configuration.get
- Updates the OpenID Connect federation configuration.put
SAML 2.0 Alias Management
SAML 2.0 Federations Management
WS Federation Management
- Enable WS-Federation audit trace for the tenantpost
- Enable WS-Federation audit tracepost

Access & Risk Policies

Access Policy Management V5.0

Branding & customization

Template File Registration
Customization - Themes

Lifecycle & Governance

Adapter Management
Provisioning Management
Access Request Management V1.0

Identity agents

Agent Bridge Support Service

Data privacy & consent

Data Privacy and Consent
Data Privacy and Consent Management

Event analytics & reports

Events
- Get all events for a tenant.get
Reports

Authentication Configuration

Email One-time Password Configuration 2.0
- Retrieve the email one-time password configuration.get
- Update the email one-time password configuration.put
One-time Password Configuration 2.0
- Retrieve the one-time password configuration.get
- Update the one-time password configuration.put
Knowledge Questions Configuration
SMS One-time Password Configuration 2.0
- Retrieve the SMS one-time password configuration.get
- Update the SMS one-time password configuration.put
Time-based One-time Password Configuration 2.0
- Retrieve the time-based one-time password configuration.get
- Update the time-based one-time password configuration.put
Voice One-time Password Configuration
- Retrieve the voice one-time password configuration.get
- Update the voice one-time password configuration.put
Authenticator Clients
Signature Authentication Configuration

General configuration

API Clients
Session Exchange Configuration
- Retrieve the configuration for session exchange.get
- Set the session exchange config.put
Tenant Properties API 2.0
- Retrieves a list of tenant properties for the specified tenant.get
- Replaces the tenant properties for the specified tenant.put
Admin Entitlement Management
Certificates
Push Credentials Management

Password Vault

Password Vault Configuration
- Retrieve the password vault configuration.get
- Update the password vault configuration.put
Password Vault

Deprecated APIs

Deprecated - Attribute Evaluation. Replaced by /v2.0/attributequery.
- Deprecated - Preview the value that would be computed for this attribute.post
Access Policy Management v3.0 (deprecated)
OpenID Connect Consent Management (deprecated)

IBM Security Verify API

Tenant policy configuration
- Retrieve the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedget
- Set the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedput
Identity Sources V1 - Deprecated
Identity Sources V2
Certification Campaign assignments v2.0
Certification Campaign configurations v2.0
Certification Campaign instances v2.0
Certification Campaign statistics v2.0
Certification Campaign assignments v1.0 - Deprecated
Certification Campaign configurations v1.0 - Deprecated
Certification Campaign instances v1.0 - Deprecated
Certification Campaign statistics v1.0 - Deprecated
Dictionary Policy Management 3.0
Password Dictionary Management 3.0
Password Policy Management 3.0
FIDO MDS Configuration
External MFA Providers
Well-Known Uniform Resource Identifiers
Access Management
Device manager configuration
Smartcard and other X.509 certificate provider configuration
Smartcard or certificate provider operations
- Remove smartcard/X.509 certificate provider certificates for a specified user id.delete
OpenID Connect Token Types
Threat Insights Configurations API
Webhook-Configuration

Updates entitlements to an application.

post https://{tenanturl}/v1.0/owner/applications/{applicationId}/entitlements

Entitlements required: manageAppAccessAdmin (Manage application lifecycle) or manageAppAccessOwner (Manage application entitlements)

Path Params

applicationId

string

required

Application Identifier

Body Params

Updated Entitlement Object

birthRightAccess

boolean

A boolean flag indicating whether all users in the organization are entitled by default or not

requestAccess

boolean

A boolean flag indicating whether a user needs to raise a request to get the entitlement

additions

array of objects

List containing information about user/group who will be granted entitlements

additions

deletions

array of strings

List of identifier associated with an entitlement which needs to be deleted

deletions

Responses

200

Request is Successful.

Response body

object

messageId

string

Unique identifier associated with the message.

messageDescription

string

required

Text describing the error message.

401

User is not Authorised.

404

Invalid Application ID.

Updated over 1 year ago

Fetches the entitlements of an application.

Get All account synchronization status for all applications of given tenant.

Did this page help you?

Language

URL


xxxxxxxxxx
1
curl --request POST \
2
     --url https://tenant_url/v1.0/owner/applications/applicationId/entitlements \
3
     --header 'accept: application/json' \
4
     --header 'content-type: application/json'

Choose an example:

application/json

Updated over 1 year ago

Fetches the entitlements of an application.

Get All account synchronization status for all applications of given tenant.

Did this page help you?

OAuth and OIDC
OpenID Connect
Retrieve user informationpost
Retrieve user informationget
Get the access token.post
Revoke the token.post
Get the provider's JSON Web Key Set (JWKS).get
Introspect the token.post
Authorize device to use OIDC.post
Delete a dynamic client.delete
Read a dynamic client.get
Create a dynamic client.post
Authorize the user to use OIDC.post
Authorize the user to use OIDC.get
Get provider's metadata.get
OpenID Connect API v2
Delete a dynamic client.delete
Read a dynamic client.get
Create a dynamic client.post
Revoke the token.post
Retrieve user informationpost
Retrieve user informationget
Introspect the tokenpost
Pushed Authorization Requests (PAR).post
Get the access token.post
Authorize the user to use OIDC.post
Authorize the user to use OIDC.get
Get provider's metadataget

Users & Groups
Account expiration configuration
Set the account expiration config.put
Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
Password Policy Management 2.0
Update the password policy for a specified tenant.put
Get the password policy for a specified tenant.get
Users Management Version 2.0
Reset a user's password.patch
Compare a clear text value to a custom hashed attribute value for a user.post
Modify a user's attributes in Cloud Directory. It can be used to update one or more attributes.patch
Deletes a user from a specified tenant in Cloud Directory.delete
Replaces the user's attributes in Cloud Directory.put
Retrieves the details of a user in Cloud Directory for a tenant.get
Retrieves the total number of users under a tenant in the Cloud Directory.get
Authenticate a user name and password.post
Creates a user in Cloud Directory.post
Retrieves a list of users that belong to a specified tenant and match the search filter criteria.get
Retrieves the SCIM capabilities enabled for the tenant.get
Retrieves a list of a manager's reportees that belong to a specified tenant and match the search filter criteria.get
Change the authenticated user's password.post
Retrieves the authenticated user's translated labels for their effective password policy.get
Retrieves the authenticated user's effective password policy.get
Delete the authenticated user's Cloud Directory account.delete
Replaces the authenticated user's attributes in Cloud Directory.put
Retrieves the account details of the authenticated user in Cloud Directory.get
Deletes a CSV import request from the specified tenant.delete
Cancels a CSV import request for the specified tenant.put
Retrieves the details of a CSV import request that belong to the specified tenant.get
Retrieves a list of CSV import requests that belong to the specified tenant.get
Import users for the specified tenant from a comma separated value (CSV) file.post
Get the list of supported header names.get
Delete users for the specified tenant from a (CSV) file.post
The bulk request that clients use to send a potentially large collection of resource operations in a single request. For a PUT, PATCH, or POST, the data in the operation is the resource data as for a single SCIM request.post
Groups Management Version 2.0
This API is used to modify a group's attributes. It can be used to update one or more attributes.patch
Delete a group from a specified tenant.delete
Updates the group's attributes for a specified tenant.put
Retrieves the details of a group for a specified tenant.get
Retrieves the total number of groups under a tenant in the Cloud Directory.get
Creates a group for a specified tenant.post
Retrieves a list of groups that belong to the specified tenant and match the search criteria.get
Import groups for the specified tenant from a comma separated value (CSV) file.post
User Self Care API
Validates the authentication attempt that is associated with the current step in the username recovery flow.post
Recover the user's forgotten user name.put
Initiate a forgot username request by using an authentication mechanism.post
Validate a user invitation.post
Cancel an invitation.delete
Complete a user invitation.put
Retrieve an invitation.get
Send users an invitation.post
List all invitations.get
Validates the authentication attempt that is associated with the current step in the reset password flow.post
Reset the user's forgotten password.put
Initiate a reset password request by using an authentication mechanism.post

Attribute management
Attributes
Reverts a global attribute to the default configurationput
Modifies selected properties of an attributepatch
Deletes an attributedelete
Modifies an attributeput
Gets an attributeget
Gets the list of existing attribute tagsget
Bulk management operations of attributespatch
Creates an attributepost
Lists all attributesget
Retrieves the list of attribute functions that are configured for the specified tenantget

Application management
Application Access
API to determine if a user is entitled to an application.post
Fetches the applications that are entitled to a user.get
Gets all operations performed in an Account Sync operationget
Get All account synchronization status for all applications of given tenant.get
Updates entitlements to an application.post
Fetches the entitlements of an application.get
Updates the attributes of an application accessible to the owner.put
Fetches the details of an application accessible to owner.get
Searches for the applications of an owner.get
Retrieves a list of application ids that have the specified auth policy id attached.get
Provides mechanism to adopt an Orphan accountpost
Retrieves all supporting data for a given application.get
Gets the Application account list details for specified account synchronization id.get
Stop given account synchronization of an application.post
Gets adoption stats details of account synchronization for an application.get
Get Last run reconciliation status for an application.get
Start / Stop Account Synchronization.post
Suspend/Restore/Orphan/Unmanage/deprovision an Account identified by this applicationId, userId.post
Get attribute values delta for an account for the application.get
Get the account attributes of given account associated with an application.get
Remediate Non-Compliant accounts for an application.post
Gets the list of accounts for the specified application.get
Deletes the application that is specified by the application ID.delete
Updates an application.put
Gets the details of an application.get
Gets the summary stats of all applications for a given tenant.get
Update custom rule.put
Get rule definition.get
Create custom rule.post
Checks if the identity source is configured with an application.get
Creates an instance of an application for a tenant.post
Gets the list of all applications that were onboarded by tenant administrator. A maximum of 500 applications are returned. Use pagination to fetch the next set of applications.get
Retry a failed operationpost
Gets details of the specified operationget
Retry a list of failed operations.post
Gets the list of all the operations that are performed on accounts of this tenant.get
Entitlement Management
Get the right values of a permission assigned to a user.get
Get the entitlements that are granted to a user.get
Get all the applications that are granted to a user.get
Check if a user is granted to an application.post
Check if a user is granted to an application.get
Get the entitlements granted to the logged user.get
Get the entitlements granted to a group.get
Publish or discard an entitlement.patch
Update the rights values of a role.patch
Add or remove one or more children for an entitlement.post
Find the children of an entitlement.get
Update an entitlement.patch
Delete an entitlement.delete
Grant or revoke an entitlement to one or more users and groups.post
Get the entitlement details.get
Grant or revoke one or more entitlements to a user.post
Search the entitlements.post
Get the list of user added to or removed from dynamic entitlement.post
Grant or revoke one or more entitlements to a group.post
Search the assignments.post
Creates a new entitlement.post
Update the rights values of an assignment.patch
Get the rights values associated to an assignment.get

Authentication
Identity Source Types
Retrieve the metadata of a particular SAML Enterprise.get
Retrieve the details of a particular identity source types.get
Retrieve the details of all the identity source types.get
Authentication Token Exchange
Exchange a valid bearer token for an authenticated browser sessionpost
Exchange a valid bearer token for an authenticated browser sessionget
Authentication Manage User Sessions
Revoke or take some other action on specific sessions for the user ID that is specified in the request path.patch
Revoke all sessions for the user.delete
Get the sessions for the user.get
Delete random session for the user.delete
Social JWT Exchange
Exchange a valid social JWT for an IBM Security Verify access token.post
FIDO Configuration
Delete a relying party configuration.delete
Update a relying party configuration.put
Retrieve a relying party configuration.get
Create a relying party configuration.post
Retrieve the list of relying party configurations.get
Delete a metadata service entry.delete
Delete a metadata entry.delete
Update a metadata service entry.put
Update a metadata entry.put
Retrieve a metadata service entry.get
Retrieve a metadata entry.get
Create a metadata service entry.post
Create a metadata entry.post
Retrieve the list of metadata service entries.get
Retrieve the list of metadata entries.get
QR Code Login Configuration
Update the QR code login configuration.put
Retrieve the QR code login configuration.get
reCAPTCHA
Delete a reCAPTCHA configurationdelete
Update a reCAPTCHA configurationput
Retrieve a reCAPTCHA configurationget
Create a reCAPTCHA configurationpost
Retrieve the list of reCAPTCHA configurationsget
FIDO
Complete a FIDO registration.post
Initiate a FIDO registration.post
Complete a FIDO authentication.post
Initiate a FIDO authentication.post
Resolve an rpId.post
Delete a FIDO registration.delete
Update a FIDO registration.put
Retrieve a FIDO registration.get
Retrieve the list of FIDO registrations.get
QR Code Login
Cancel a QR code login verification.delete
Attempt a QR code login verification.post
Retrieve a QR code login verification.get
Create a QR code login verification.get
Password Authentication
Reset a user's password for an on-premise identity source.post
Attempt password authentication with an identity source.post
Change a user's password for an on-premise identity source.put
Retrieve the list of valid password based identity sources.get

Multi-factor authentication
Authentication Factors 2.0
Discover the availability of an authentication factor.get
Discover the availability of all authentication factors.get
Retrieve the list of authentication factor enrollments.get
Email One-time Password 2.0
Cancel a email one-time password verification.delete
Attempt a email one-time password verification.post
Retrieve a email one-time password verification.get
Create a email one-time password verification.post
Delete a email one-time password enrollment.delete
Update a email one-time password enrollment.put
Retrieve a email one-time password enrollment.get
Cancel a transient email one-time password verification.delete
Attempt a transient email one-time password verification.post
Retrieve a transient email one-time password verification.get
Create a transient email one-time password verification.post
Create a email one-time password enrollment.post
Retrieve the list of email one-time password enrollments.get
One-time Password
Cancel a one-time password verification.delete
Attempt a one-time password verification.post
Retrieve a one-time password verification.get
Create a one-time password verification.post
Knowledge Questions
Delete a knowledge question verification.delete
Attempt a knowledge question verification.post
Retrieve a knowledge question verification.get
Create a knowledge question verification.post
Delete a knowledge question enrollment.delete
Update a knowledge question enrollment.put
Retrieve a knowledge question enrollment.get
Create a knowledge question enrollment.post
Retrieve the list of knowledge question enrollments.get
SMS One-time Password 2.0
Cancel a SMS one-time password verification.delete
Attempt a SMS one-time password verification.post
Retrieve a SMS one-time password verification.get
Create a SMS one-time password verification.post
Delete a SMS one-time password enrollment.delete
Update a SMS one-time password enrollment.put
Retrieve a SMS one-time password enrollment.get
Cancel a transient SMS one-time password verification.delete
Attempt a transient SMS one-time password verification.post
Retrieve a transient SMS one-time password verification.get
Create a transient SMS one-time password verification.post
Create a SMS one-time password enrollment.post
Retrieve the list of SMS one-time password enrollments.get
Time-based One-time Password 2.0
Delete a time-based one-time password enrollment.delete
Attempt a time-based one-time password verification.post
Update a time-based one-time password enrollment.put
Retrieve a time-based one-time password enrollment.get
Create a time-based one-time password enrollment.post
Retrieve the list of time-based one-time password enrollments.get
Voice One-time Password
Cancel a voice one-time password verification.delete
Attempt a voice one-time password verification.post
Retrieve a voice one-time password verification.get
Create a voice one-time password verification.post
Delete a voice one-time password enrollment.delete
Update a voice one-time password enrollment.put
Retrieve a voice one-time password enrollment.get
Cancel a transient voice one-time password verification.delete
Attempt a transient voice one-time password verification.post
Retrieve a transient voice one-time password verification.get
Create a transient voice one-time password verification.post
Create a voice one-time password enrollment.post
Retrieve the list of voice one-time password enrollments.get
Authenticators
Complete a specific verification transaction.post
Retrieve a specific verification transaction.get
Initiate a verification transaction.post
Retrieve the list of verification transactions.get
Update the editable attributes of a specific authenticator registration.patch
Delete a specific authenticator registration.delete
Update the editable attributes of a specific authenticator registration.put
Retrieve a specific authenticator registration.get
Complete or refresh an authenticator registration.post
Initiate an authenticator registration.post
Retrieve the list of available authenticator clients.get
Retrieve the list of registered authenticators.get
Signature Authentication
Update the editable attributes of a specific signature enrollment.patch
Delete a specific signature enrollment.delete
Update the editable attributes of a specific signature enrollment.put
Retrieve a specific signature enrollment.get
Enroll a signature authentication method.post
Retrieve the list of signature enrollments.get

Federation
Identity Provider Attribute Mappings
Set the global attribute mappings for identity sources.put
Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
OpenID Connect Grant Management
Deletes a specific OIDC application grant.delete
Retrieves a specific OIDC application grant.get
Bulk delete, disable, or enable OIDC application grants.patch
Retrieves the list of OIDC application grants.get
Deletes a specific OIDC grant.delete
Retrieves a specific OIDC grant.get
Bulk delete, disable, or enable OIDC grants.patch
Retrieves the list of OIDC grants.get
Deletes a specific OIDC grant.delete
Retrieves a specific OIDC grant.get
Bulk delete, disable, or enable OIDC grants.patch
Retrieves the list of OIDC grants.get
Deprecated - Deletes a specific OIDC grant.delete
Deprecated - Retrieves a specific OIDC grant.get
Deprecated - Bulk delete, disable, or enable OIDC grants.patch
Deprecated - Retrieves the list of OIDC grants.get
OpenID Connect Dynamic Client Profile
Update dynamic client profile.put
Read dynamic client profile.get
OpenID Connect Federation
Updates the OpenID Connect federation configuration.put
Retrieves the OpenID Connect federation configuration.get
SAML 2.0 Alias Management
Deletes a specific alias belonging to userdelete
Retrieves a specific alias belonging to userget
Retrieves the list of aliases belonging to userget
Deletes a specific aliasdelete
Retrieves a specific aliasget
Retrieves the list of aliasesget
SAML 2.0 Federations Management
Exports a federation metadataget
Update a Federationput
Get a Federationget
Get all Federationsget
WS Federation Management
Enable WS-Federation audit tracepost
Enable WS-Federation audit trace for the tenantpost

Access & Risk Policies
Access Policy Management V5.0
delete an access policy revisiondelete
update a access policy revisionput
retrieve a revision for an access policyget
retrieve the revisions for an access policyget
delete an access policydelete
create an access policy revisionpost
update a access policyput
retrieve a access policyget
create an access policypost
retrieve access policiesget

Branding & customization
Template File Registration
Delete a registered template file.delete
Register a template.post
Get template registrations.get
Customization - Themes
Deletes a customization for a specific template file in a themedelete
Update a specific template file for a themeput
Download a specific template file from a themeget
Delete a theme registrationdelete
Update a theme registrationput
Download theme-based templatesget
Register a new themepost
List all the themesget
Reset customizationsdelete

Lifecycle & Governance
Adapter Management
Update the identity adapter profile.put
Upload the identity adapter profile JAR file.post
Publish the profilepost
Get webui template in the system for a given profile id and template id.get
Get all profiles in system for a tenant with a given template id.get
Delete specified profiledelete
Update draft in system.put
Get details of the specified profileget
List all profiles using the attribute.get
Create draft in system.post
Get all custom profiles in system.get
Provisioning Management
Delete provisioning policy for an application.delete
Create a provisioning policy for an applicatication. Provisioning policy enables or disables publishing of provisioning events for the application.post
Update provisioning policy for an application. In addition resends all events for the application.put
Get provisioning policy for an application.get
Access Request Management V1.0
Delete a workflow configuration.delete
Replace an existing workflow configuration.put
Find a workflow configuration by ID.get
Find a workflow configuration.get
Find all requestable applications in the catalog.get
Deprecated - Cancel a list of requestspost
Deprecated - Create a fine grained access request for selfpost
Deprecated - Get the summary of self request statisticsget
Deprecated - Get statistical view of self requestsget
Create a self requestpost
Deprecated - Search the self requestsget
Cancel a list of requestspost
Create a fine grained access requestspost
Send a reminder to all approvers of a requestpost
Add a justificationpost
Get request detailsget
Get the summary of request statisticsget
Get statistical view of requestsget
Create a requestpost
Search the requestsget
Execute actions for a list of requestspost
Get statistical summary of requests for approvalget
Get statistical view of requests for approvalget
Search requests of an approverget
Delete all the requests that are filtered by one or more query parameters.delete
Delete a request by iddelete
Get the requestable access list for self.post
Get details of specified requestable access.get

Identity agents
Agent Bridge Support Service
Retrieve the API Client credentials.get
Delete an agent configuration.delete
Update a specific agent configuration.put
Retrieve a specific agent's configuration.get
Retrieve corrupted agent configuration(s) which can't be decrypted due to missing certificateget
Create an agent configuration.post
Retrieve agent configurations.get

Data privacy & consent
Data Privacy and Consent
Provides the data usage approval.post
Presents the data subject information to the user.post
Bulk create or patch consent records.patch
Create or update a consent record.post
Data Privacy and Consent Management
Delete a specific consent record from a tenant.delete
Retrieve a specific consent record.get
Bulk delete consent records.patch
Retrieve a list of consent records.get

Event analytics & reports
Events
Get all events for a tenant.get
Reports
Run a report.post
Gets the details of a download job or gets a CSV report.get
Export reports for a specified tenant into CSV file.post
Generates a report asynchronously for a specified tenant into a CSV file.post

Authentication Configuration
Email One-time Password Configuration 2.0
Update the email one-time password configuration.put
Retrieve the email one-time password configuration.get
One-time Password Configuration 2.0
Update the one-time password configuration.put
Retrieve the one-time password configuration.get
Knowledge Questions Configuration
Update a knowledge questions configuration profile.put
Retrieve a knowledge questions configuration profile.get
Retrieve the list of knowledge questions configuration profiles.get
SMS One-time Password Configuration 2.0
Update the SMS one-time password configuration.put
Retrieve the SMS one-time password configuration.get
Time-based One-time Password Configuration 2.0
Update the time-based one-time password configuration.put
Retrieve the time-based one-time password configuration.get
Voice One-time Password Configuration
Update the voice one-time password configuration.put
Retrieve the voice one-time password configuration.get
Authenticator Clients
Update the metadata attributes of an authenticator client.patch
Update the metadata attributes of an authenticator client.put
Retrieve the metadata of a specific authenticator client.get
Update the editable attributes of a specific authenticator client.patch
Delete a specific authenticator client.delete
Update the editable attributes of a specific authenticator client.put
Retrieve a specific authenticator client.get
Create an authenticator client.post
Retrieve the list of authenticator clients.get
Signature Authentication Configuration
Update the signature authentication methods configuration.patch
Update the signature authentication method configuration.put
Retrieve the signature authentication methods configuration.get

General configuration
API Clients
Gets a YAML response that contains the credentials for a specific client.get
Deletes an API clientdelete
Updates a specific API clientput
Gets a specific API clientget
Bulk deletes the API clientspatch
Create an API Clientpost
Lists the API Clientsget
Session Exchange Configuration
Set the session exchange config.put
Retrieve the configuration for session exchange.get
Tenant Properties API 2.0
Replaces the tenant properties for the specified tenant.put
Retrieves a list of tenant properties for the specified tenant.get
Admin Entitlement Management
Find the admin entitlements that are granted to a user.get
Find the admin entitlements that are granted to the user that is logged in.get
Find the admin entitlements that are granted to a group.get
Publish or discard an admin entitlement.patch
Add or remove one or more children for an admin entitlement.post
Get the children of an admin entitlement.get
Update an admin entitlement.patch
Delete an admin entitlement.delete
Grant or revoke an admin entitlement to one or more users and groups.post
Get an admin entitlement.get
Grant or revoke one or more admin entitlements to a user.post
Get the list of admin entitlements.post
Get the list of user added to or removed from dynamic admin entitlement.post
Grant or revoke one or more admin entitlements to a group.post
Get the list of admin assignments.post
Create an admin entitlement.post
Certificates
Delete a signer certificate.delete
Gets the signer certificate with the given label.get
Imports a signer certificate.post
Gets the list of signer certificates.get
Delete a personal certificate.delete
Update a personal certificate.put
Get a single personal certificate with the specified label.get
Import or generate a personal certificate.post
Gets the list of personal certificates.get
Push Credentials Management
Delete a specific set of configured mobile push provider credentials.delete
Update a specific set of configured mobile push provider credentials.put
Get a specific set of configured mobile push provider credentials.get
Create a set of mobile push provider credentials.post
Get all the sets of configured mobile push provider credentials.get

Password Vault
Password Vault Configuration
Update the password vault configuration.put
Retrieve the password vault configuration.get
Password Vault
Delete a password vault resource.delete
Update a password vault resource.put
Retrieve a password vault resource.get
Delete a password vault enrollment.delete
Update a password vault enrollment.put
Retrieve a password vault enrollment.get

Deprecated APIs
Deprecated - Attribute Evaluation. Replaced by /v2.0/attributequery.
Deprecated - Preview the value that would be computed for this attribute.post
Access Policy Management v3.0 (deprecated)
Deprecated - Delete custom policy of tenant with specified id.delete
Deprecated - Update the policy instance of tenant with specified id.put
Deprecated - Retrieve the details of a particular policy specified with id.get
Deprecated - Create a custom policy for tenant.post
Deprecated - Retrieve list of tenant policies.get
OpenID Connect Consent Management (deprecated)
Deprecated - Bulk scope/entitlement removal of OIDC consents.patch
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get

IBM Security Verify API
Tenant policy configuration
Set the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedput
Retrieve the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedget
Identity Sources V1 - Deprecated
Deprecated - Delete an identity source instance of the tenant with the specified instance ID.delete
Deprecated - Update an identity source instance of the tenant with the specified instance ID.put
Deprecated - Retrieve the details of a particular identity source instance of the tenant with the specified instance ID.get
Deprecated - Retrieve all the identity source instances of the tenant that have this property name and value.get
Deprecated - Retrieve all the identity source instances of the tenant that use the passord policy ID's specified in the 'search' query parameter.get
Deprecated - API to create an identity source instance for a tenant.post
Deprecated - Retrieve all the identity source instances of the tenant.get
Identity Sources V2
V2 Delete an identity source instance of the tenant with the specified instance ID.delete
V2 Update an identity source instance of the tenant with the specified instance ID.put
V2 Retrieve the details of a particular identity source instance of the tenant with the specified instance ID.get
V2 Retrieve all the identity source instances of the tenant that have this property name and value.get
V2 Retrieve all the identity source instances of the tenant that use the passord policy ID's specified in the 'search' query parameter.get
V2 API to create an identity source instance for a tenant.post
V2 Retrieve all the identity source instances of the tenant.get
Certification Campaign assignments v2.0
Updates the list of assignments on a specified campaign instance that belong to a specified tenant.patch
Updates a specified assignment from the specific tenant.put
Retrieves the details of the assignment from the specific tenant.get
Retrieves the list of a assignments associated with the specified campaign instance from the specific tenant.post
Retrieves the list of all assignments associated with the specified campaign instance from the specific tenant.get
Certification Campaign configurations v2.0
Perform operations on a list of campaign configurations that belong to a specified tenant.patch
Creates a campaign configuration for the specific tenant.post
Retrieves a list of campaign configurations from the specific tenant.get
Retrieves the details of the Reviewer Types available for the specific Campaign Type.get
Updates the campaign configuration for a specified campaign configuration from the specific tenant.put
Retrieves the details of the campaign configuration from the specific tenant.get
Certification Campaign instances v2.0
Perform an operation on a specified campaign instance that belong to a specified tenant.put
Retrieves the details of the campaign instance from the specific tenant.get
Creates a preview campaign configuration for the specified tenant.post
Retrieves the list of a campaign instances associated with the specified campaign configuration from the specific tenant.get
Perform operations on a collection of campaign instances that belong to a specific tenant.patch
Retrieves the list of a campaign instances from the specific tenant.get
Certification Campaign statistics v2.0
Retrieves the campaign instance statistics from the specific tenant.get
Retrieves the campaign configuration statistics from the specific tenant.get
Retrieves the assignment statistics of the campaign instance from the specific tenant.get
Retrieves statistics of specific assignments within a given instance from the specific tenant.get
Certification Campaign assignments v1.0 - Deprecated
Deprecated - Add new assignments to a continuous campaign.post
Deprecated - Refresh assignments in a continuous campaign.post
Deprecated - Modify a given set of assignments.patch
Deprecated - Retrieve all assignments in a given campaign instance.post
Deprecated - Retrieve all assignments, in a given campaign instance.get
Deprecated - Modify a given set of assignments.patch
Deprecated - Add new assignments to a continuous campaign instance.post
Deprecated - Modify a given assignment.put
Deprecated - Retrieve a specific assignment.get
Deprecated - Modify a given assignment.put
Deprecated - Retrieve a specific assignment.get
Deprecated - Retrieve all assignments in a given campaign instance.post
Deprecated - Retrieve all assignments in a given campaign instanceget
Certification Campaign configurations v1.0 - Deprecated
Deprecated - Update the certification manager schema.put
Update the certification manager schema.put
Deprecated - Edit campaign configurations.patch
Deprecated - Create a campaign configuration.post
Deprecated - Retrieve the campaign configurations.get
Deprecated - Delete specific campaign configuration.delete
Deprecated - Edit specific campaign configuration.put
Deprecated - Retrieve a specific campaign configuration.get
Certification Campaign instances v1.0 - Deprecated
Deprecated - Retrieve instances corresponding to a specific campaign configuration.get
Deprecated - Create a preview campaign.post
Deprecated - Retrieve specific campaign instance.get
Deprecated - Retrieve campaign instances.get
Deprecated - Modify specific campaign instance.put
Deprecated - Retrieve a specific campaign instance.get
Deprecated - Retrieve instances corresponding to a specific campaign configuration.get
Deprecated - Modify campaign instances.patch
Deprecated - Retrieve campaign instances.get
Certification Campaign statistics v1.0 - Deprecated
Deprecated - Retrieve statistics of specific assignments.get
Deprecated - Retrieve statistics of specific campaign instances.get
Deprecated - Retrieve campaign statistics.get
Deprecated - Retrieve statistics of specific campaign instances.get
Deprecated - Retrieve statistics of specific assignments.get
Deprecated - Retrieve statistics of specific assignments within a given instance.get
Deprecated - Retrieve statistics of specific assignments within a given instance.get
Dictionary Policy Management 3.0
Modifies the specified password dictionary policy in Cloud Directory.patch
Deletes a password dictionary policy from a specified tenant in Cloud Directory. Can only delete a password dictionary policy that is not predefined.delete
Fetches the specified password dictionary policy in Cloud Directory.get
Create a password dictionary policy on the given tenantpost
Fetches a list of password dictionary policies in Cloud Directory.get
Modifies the password dictionary policy in Cloud Directory.patch
Fetches the password dictionary policy in Cloud Directory.get
Password Dictionary Management 3.0
Deletes a CSV import request from the specified tenant.delete
Cancels a CSV import request for the specified tenant.put
Retrieves the details of a CSV import request that belong to the specified tenant.get
Retrieves a list of CSV import requests that belong to the specified tenant.get
Import password dictionary for the specified tenant from a comma separated value (CSV) file.post
Get the list of supported header names.get
Export the password dictionary from the specified tenant as a comma separated value (CSV) file.get
Add or remove passwords from the tenant password dictionary in Cloud Directory.patch
Deletes all passwords from a specified tenant dictionary.delete
Password Policy Management 3.0
Validate a password against a specific policy ID on a specific tenant.post
Generate a password that satisfies the passwordStrength attributes in the given password policy.get
This API is used to get the password policy labels for a specified password policy on a given tenant using the specified locale.get
Modify a password policy's attributes in Cloud Directory. It can be used to update one or more attributes.patch
Deletes a password policy from a specified tenant in Cloud Directory. Can only delete a password policy that is not predefined.delete
Get a password policy with a given id for a specified tenant.get
Create a password policy on the given tenantpost
Get all password policies for a specified tenant.get
FIDO MDS Configuration
External MFA Providers
Retrieve the list of enrollments for all external MFA providers.get
Continue an authentication attempt via an external MFA provider.post
Retrieve the status of an authentication attempt.get
Clears all cached enrollments of specific user for an external MFA providerdelete
Action an authentication attempt via an external MFA provider.post
Retrieve the list of enrollments for an external MFA provider.get
Retrieve the list of external MFA providers.get
Delete an external MFA provider configuration.delete
Update an external MFA provider configuration.put
Retrieve an external MFA provider configuration.get
Create an external MFA provider configuration.post
Retrieve the list of external MFA provider configurations.get
Well-Known Uniform Resource Identifiers
Fetch the service's history of the assetlinks.json file for Android.get
Fetch the service's history of the apple-app-site-association file for iOS.get
Update digital asset link file for Android verifiable links.put
Update the apple app site association file for iOS verifiable links.put
Access Management
Find the children of an application entitlement either requestable or requested or granted to a specific user.get
Fetch the access assignments of specific user.post
Get user access assignments statistics.get
Get user access assignments in active and fulfillment failed state.post
Find the children of an entitlement either requestable or requested or granted to self.get
Device manager configuration
Lists uniqueuseridentifiersget
Deletes your own devicedelete
Lists your own device informationget
Delete user devicedelete
Lists device informationget
Test a device manager connectionput
PATCH a device manager configuration.patch
Delete a device manager configuration.delete
Update a device manager configurationput
Get a device-managerget
Get trusted certificates as a zip file.get
Test a device manager connectionpost
Create a device manager configuration.post
Lists device managersget
Smartcard and other X.509 certificate provider configuration
Update a smartcard or X.509 certificate provider with PATCHpatch
Delete a smartcard or X.509 certificate providerdelete
Update a smartcard or X.509 certificate provider.put
Get a smartcard and other X.509 certificate providersget
Lists attributes and uniqueUserIdentifiers for a X.509 compliant certificate.get
Create a smartcard and other X.509 certificate provider.post
Lists smartcard and other X.509 certificate providers.get
Smartcard or certificate provider operations
Remove smartcard/X.509 certificate provider certificates for a specified user id.delete
OpenID Connect Token Types
Delete a custom OIDC token typedelete
Update a custom OIDC Token Typeput
Read a custom OIDC token typeget
Create a custom OIDC token typepost
Retrieves the list of custom OIDC token types.get
Threat Insights Configurations API
Delete the threat configuration for specified tenant for given configuration iddelete
Update the threat configuration Status for specified tenant and configuration idput
Update the threat configuration for specified tenant for given configuration idput
Fetch threat configuration for specified tenant and configuration idget
Create the threat configuration for specified tenantpost
Fetch threat default configuration for specified tenantget
Webhook-Configuration
Tests a resource of a configured webhookget
Test a configured webhookget
Current webhook statusget
Get webhook healthget
Remove a dead letterdelete
Retrieve a dead letterget
Initiate a reconciliation of deadletterspost
View the state of a deadletter reconciliationget
View the total number of deadletters a webhookget
Remove webhook dead lettersdelete
Fetch webhook dead lettersget
Delete a webhhookdelete
Update a Webhookput
Fetch a Webhookget
Develop an transformpost
List Webhook Purposesget
Preflight a webhook configurationpost
Preflight a webhook configurationpost
Create a Webhookpost
List Webhooksget

OAuth and OIDC
OpenID Connect
Retrieve user informationpost
Retrieve user informationget
Get the access token.post
Revoke the token.post
Get the provider's JSON Web Key Set (JWKS).get
Introspect the token.post
Authorize device to use OIDC.post
Delete a dynamic client.delete
Read a dynamic client.get
Create a dynamic client.post
Authorize the user to use OIDC.post
Authorize the user to use OIDC.get
Get provider's metadata.get
OpenID Connect API v2
Delete a dynamic client.delete
Read a dynamic client.get
Create a dynamic client.post
Revoke the token.post
Retrieve user informationpost
Retrieve user informationget
Introspect the tokenpost
Pushed Authorization Requests (PAR).post
Get the access token.post
Authorize the user to use OIDC.post
Authorize the user to use OIDC.get
Get provider's metadataget

Users & Groups
Account expiration configuration
Set the account expiration config.put
Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
Password Policy Management 2.0
Update the password policy for a specified tenant.put
Get the password policy for a specified tenant.get
Users Management Version 2.0
Reset a user's password.patch
Compare a clear text value to a custom hashed attribute value for a user.post
Modify a user's attributes in Cloud Directory. It can be used to update one or more attributes.patch
Deletes a user from a specified tenant in Cloud Directory.delete
Replaces the user's attributes in Cloud Directory.put
Retrieves the details of a user in Cloud Directory for a tenant.get
Retrieves the total number of users under a tenant in the Cloud Directory.get
Authenticate a user name and password.post
Creates a user in Cloud Directory.post
Retrieves a list of users that belong to a specified tenant and match the search filter criteria.get
Retrieves the SCIM capabilities enabled for the tenant.get
Retrieves a list of a manager's reportees that belong to a specified tenant and match the search filter criteria.get
Change the authenticated user's password.post
Retrieves the authenticated user's translated labels for their effective password policy.get
Retrieves the authenticated user's effective password policy.get
Delete the authenticated user's Cloud Directory account.delete
Replaces the authenticated user's attributes in Cloud Directory.put
Retrieves the account details of the authenticated user in Cloud Directory.get
Deletes a CSV import request from the specified tenant.delete
Cancels a CSV import request for the specified tenant.put
Retrieves the details of a CSV import request that belong to the specified tenant.get
Retrieves a list of CSV import requests that belong to the specified tenant.get
Import users for the specified tenant from a comma separated value (CSV) file.post
Get the list of supported header names.get
Delete users for the specified tenant from a (CSV) file.post
The bulk request that clients use to send a potentially large collection of resource operations in a single request. For a PUT, PATCH, or POST, the data in the operation is the resource data as for a single SCIM request.post
Groups Management Version 2.0
This API is used to modify a group's attributes. It can be used to update one or more attributes.patch
Delete a group from a specified tenant.delete
Updates the group's attributes for a specified tenant.put
Retrieves the details of a group for a specified tenant.get
Retrieves the total number of groups under a tenant in the Cloud Directory.get
Creates a group for a specified tenant.post
Retrieves a list of groups that belong to the specified tenant and match the search criteria.get
Import groups for the specified tenant from a comma separated value (CSV) file.post
User Self Care API
Validates the authentication attempt that is associated with the current step in the username recovery flow.post
Recover the user's forgotten user name.put
Initiate a forgot username request by using an authentication mechanism.post
Validate a user invitation.post
Cancel an invitation.delete
Complete a user invitation.put
Retrieve an invitation.get
Send users an invitation.post
List all invitations.get
Validates the authentication attempt that is associated with the current step in the reset password flow.post
Reset the user's forgotten password.put
Initiate a reset password request by using an authentication mechanism.post

Attribute management
Attributes
Reverts a global attribute to the default configurationput
Modifies selected properties of an attributepatch
Deletes an attributedelete
Modifies an attributeput
Gets an attributeget
Gets the list of existing attribute tagsget
Bulk management operations of attributespatch
Creates an attributepost
Lists all attributesget
Retrieves the list of attribute functions that are configured for the specified tenantget

Application management
Application Access
API to determine if a user is entitled to an application.post
Fetches the applications that are entitled to a user.get
Gets all operations performed in an Account Sync operationget
Get All account synchronization status for all applications of given tenant.get
Updates entitlements to an application.post
Fetches the entitlements of an application.get
Updates the attributes of an application accessible to the owner.put
Fetches the details of an application accessible to owner.get
Searches for the applications of an owner.get
Retrieves a list of application ids that have the specified auth policy id attached.get
Provides mechanism to adopt an Orphan accountpost
Retrieves all supporting data for a given application.get
Gets the Application account list details for specified account synchronization id.get
Stop given account synchronization of an application.post
Gets adoption stats details of account synchronization for an application.get
Get Last run reconciliation status for an application.get
Start / Stop Account Synchronization.post
Suspend/Restore/Orphan/Unmanage/deprovision an Account identified by this applicationId, userId.post
Get attribute values delta for an account for the application.get
Get the account attributes of given account associated with an application.get
Remediate Non-Compliant accounts for an application.post
Gets the list of accounts for the specified application.get
Deletes the application that is specified by the application ID.delete
Updates an application.put
Gets the details of an application.get
Gets the summary stats of all applications for a given tenant.get
Update custom rule.put
Get rule definition.get
Create custom rule.post
Checks if the identity source is configured with an application.get
Creates an instance of an application for a tenant.post
Gets the list of all applications that were onboarded by tenant administrator. A maximum of 500 applications are returned. Use pagination to fetch the next set of applications.get
Retry a failed operationpost
Gets details of the specified operationget
Retry a list of failed operations.post
Gets the list of all the operations that are performed on accounts of this tenant.get
Entitlement Management
Get the right values of a permission assigned to a user.get
Get the entitlements that are granted to a user.get
Get all the applications that are granted to a user.get
Check if a user is granted to an application.post
Check if a user is granted to an application.get
Get the entitlements granted to the logged user.get
Get the entitlements granted to a group.get
Publish or discard an entitlement.patch
Update the rights values of a role.patch
Add or remove one or more children for an entitlement.post
Find the children of an entitlement.get
Update an entitlement.patch
Delete an entitlement.delete
Grant or revoke an entitlement to one or more users and groups.post
Get the entitlement details.get
Grant or revoke one or more entitlements to a user.post
Search the entitlements.post
Get the list of user added to or removed from dynamic entitlement.post
Grant or revoke one or more entitlements to a group.post
Search the assignments.post
Creates a new entitlement.post
Update the rights values of an assignment.patch
Get the rights values associated to an assignment.get

Authentication
Identity Source Types
Retrieve the metadata of a particular SAML Enterprise.get
Retrieve the details of a particular identity source types.get
Retrieve the details of all the identity source types.get
Authentication Token Exchange
Exchange a valid bearer token for an authenticated browser sessionpost
Exchange a valid bearer token for an authenticated browser sessionget
Authentication Manage User Sessions
Revoke or take some other action on specific sessions for the user ID that is specified in the request path.patch
Revoke all sessions for the user.delete
Get the sessions for the user.get
Delete random session for the user.delete
Social JWT Exchange
Exchange a valid social JWT for an IBM Security Verify access token.post
FIDO Configuration
Delete a relying party configuration.delete
Update a relying party configuration.put
Retrieve a relying party configuration.get
Create a relying party configuration.post
Retrieve the list of relying party configurations.get
Delete a metadata service entry.delete
Delete a metadata entry.delete
Update a metadata service entry.put
Update a metadata entry.put
Retrieve a metadata service entry.get
Retrieve a metadata entry.get
Create a metadata service entry.post
Create a metadata entry.post
Retrieve the list of metadata service entries.get
Retrieve the list of metadata entries.get
QR Code Login Configuration
Update the QR code login configuration.put
Retrieve the QR code login configuration.get
reCAPTCHA
Delete a reCAPTCHA configurationdelete
Update a reCAPTCHA configurationput
Retrieve a reCAPTCHA configurationget
Create a reCAPTCHA configurationpost
Retrieve the list of reCAPTCHA configurationsget
FIDO
Complete a FIDO registration.post
Initiate a FIDO registration.post
Complete a FIDO authentication.post
Initiate a FIDO authentication.post
Resolve an rpId.post
Delete a FIDO registration.delete
Update a FIDO registration.put
Retrieve a FIDO registration.get
Retrieve the list of FIDO registrations.get
QR Code Login
Cancel a QR code login verification.delete
Attempt a QR code login verification.post
Retrieve a QR code login verification.get
Create a QR code login verification.get
Password Authentication
Reset a user's password for an on-premise identity source.post
Attempt password authentication with an identity source.post
Change a user's password for an on-premise identity source.put
Retrieve the list of valid password based identity sources.get

Multi-factor authentication
Authentication Factors 2.0
Discover the availability of an authentication factor.get
Discover the availability of all authentication factors.get
Retrieve the list of authentication factor enrollments.get
Email One-time Password 2.0
Cancel a email one-time password verification.delete
Attempt a email one-time password verification.post
Retrieve a email one-time password verification.get
Create a email one-time password verification.post
Delete a email one-time password enrollment.delete
Update a email one-time password enrollment.put
Retrieve a email one-time password enrollment.get
Cancel a transient email one-time password verification.delete
Attempt a transient email one-time password verification.post
Retrieve a transient email one-time password verification.get
Create a transient email one-time password verification.post
Create a email one-time password enrollment.post
Retrieve the list of email one-time password enrollments.get
One-time Password
Cancel a one-time password verification.delete
Attempt a one-time password verification.post
Retrieve a one-time password verification.get
Create a one-time password verification.post
Knowledge Questions
Delete a knowledge question verification.delete
Attempt a knowledge question verification.post
Retrieve a knowledge question verification.get
Create a knowledge question verification.post
Delete a knowledge question enrollment.delete
Update a knowledge question enrollment.put
Retrieve a knowledge question enrollment.get
Create a knowledge question enrollment.post
Retrieve the list of knowledge question enrollments.get
SMS One-time Password 2.0
Cancel a SMS one-time password verification.delete
Attempt a SMS one-time password verification.post
Retrieve a SMS one-time password verification.get
Create a SMS one-time password verification.post
Delete a SMS one-time password enrollment.delete
Update a SMS one-time password enrollment.put
Retrieve a SMS one-time password enrollment.get
Cancel a transient SMS one-time password verification.delete
Attempt a transient SMS one-time password verification.post
Retrieve a transient SMS one-time password verification.get
Create a transient SMS one-time password verification.post
Create a SMS one-time password enrollment.post
Retrieve the list of SMS one-time password enrollments.get
Time-based One-time Password 2.0
Delete a time-based one-time password enrollment.delete
Attempt a time-based one-time password verification.post
Update a time-based one-time password enrollment.put
Retrieve a time-based one-time password enrollment.get
Create a time-based one-time password enrollment.post
Retrieve the list of time-based one-time password enrollments.get
Voice One-time Password
Cancel a voice one-time password verification.delete
Attempt a voice one-time password verification.post
Retrieve a voice one-time password verification.get
Create a voice one-time password verification.post
Delete a voice one-time password enrollment.delete
Update a voice one-time password enrollment.put
Retrieve a voice one-time password enrollment.get
Cancel a transient voice one-time password verification.delete
Attempt a transient voice one-time password verification.post
Retrieve a transient voice one-time password verification.get
Create a transient voice one-time password verification.post
Create a voice one-time password enrollment.post
Retrieve the list of voice one-time password enrollments.get
Authenticators
Complete a specific verification transaction.post
Retrieve a specific verification transaction.get
Initiate a verification transaction.post
Retrieve the list of verification transactions.get
Update the editable attributes of a specific authenticator registration.patch
Delete a specific authenticator registration.delete
Update the editable attributes of a specific authenticator registration.put
Retrieve a specific authenticator registration.get
Complete or refresh an authenticator registration.post
Initiate an authenticator registration.post
Retrieve the list of available authenticator clients.get
Retrieve the list of registered authenticators.get
Signature Authentication
Update the editable attributes of a specific signature enrollment.patch
Delete a specific signature enrollment.delete
Update the editable attributes of a specific signature enrollment.put
Retrieve a specific signature enrollment.get
Enroll a signature authentication method.post
Retrieve the list of signature enrollments.get

Federation
Identity Provider Attribute Mappings
Set the global attribute mappings for identity sources.put
Retrieve the global configuration for attribute mapping that can be overridden in individual identity providers.get
OpenID Connect Grant Management
Deletes a specific OIDC application grant.delete
Retrieves a specific OIDC application grant.get
Bulk delete, disable, or enable OIDC application grants.patch
Retrieves the list of OIDC application grants.get
Deletes a specific OIDC grant.delete
Retrieves a specific OIDC grant.get
Bulk delete, disable, or enable OIDC grants.patch
Retrieves the list of OIDC grants.get
Deletes a specific OIDC grant.delete
Retrieves a specific OIDC grant.get
Bulk delete, disable, or enable OIDC grants.patch
Retrieves the list of OIDC grants.get
Deprecated - Deletes a specific OIDC grant.delete
Deprecated - Retrieves a specific OIDC grant.get
Deprecated - Bulk delete, disable, or enable OIDC grants.patch
Deprecated - Retrieves the list of OIDC grants.get
OpenID Connect Dynamic Client Profile
Update dynamic client profile.put
Read dynamic client profile.get
OpenID Connect Federation
Updates the OpenID Connect federation configuration.put
Retrieves the OpenID Connect federation configuration.get
SAML 2.0 Alias Management
Deletes a specific alias belonging to userdelete
Retrieves a specific alias belonging to userget
Retrieves the list of aliases belonging to userget
Deletes a specific aliasdelete
Retrieves a specific aliasget
Retrieves the list of aliasesget
SAML 2.0 Federations Management
Exports a federation metadataget
Update a Federationput
Get a Federationget
Get all Federationsget
WS Federation Management
Enable WS-Federation audit tracepost
Enable WS-Federation audit trace for the tenantpost

Access & Risk Policies
Access Policy Management V5.0
delete an access policy revisiondelete
update a access policy revisionput
retrieve a revision for an access policyget
retrieve the revisions for an access policyget
delete an access policydelete
create an access policy revisionpost
update a access policyput
retrieve a access policyget
create an access policypost
retrieve access policiesget

Branding & customization
Template File Registration
Delete a registered template file.delete
Register a template.post
Get template registrations.get
Customization - Themes
Deletes a customization for a specific template file in a themedelete
Update a specific template file for a themeput
Download a specific template file from a themeget
Delete a theme registrationdelete
Update a theme registrationput
Download theme-based templatesget
Register a new themepost
List all the themesget
Reset customizationsdelete

Lifecycle & Governance
Adapter Management
Update the identity adapter profile.put
Upload the identity adapter profile JAR file.post
Publish the profilepost
Get webui template in the system for a given profile id and template id.get
Get all profiles in system for a tenant with a given template id.get
Delete specified profiledelete
Update draft in system.put
Get details of the specified profileget
List all profiles using the attribute.get
Create draft in system.post
Get all custom profiles in system.get
Provisioning Management
Delete provisioning policy for an application.delete
Create a provisioning policy for an applicatication. Provisioning policy enables or disables publishing of provisioning events for the application.post
Update provisioning policy for an application. In addition resends all events for the application.put
Get provisioning policy for an application.get
Access Request Management V1.0
Delete a workflow configuration.delete
Replace an existing workflow configuration.put
Find a workflow configuration by ID.get
Find a workflow configuration.get
Find all requestable applications in the catalog.get
Deprecated - Cancel a list of requestspost
Deprecated - Create a fine grained access request for selfpost
Deprecated - Get the summary of self request statisticsget
Deprecated - Get statistical view of self requestsget
Create a self requestpost
Deprecated - Search the self requestsget
Cancel a list of requestspost
Create a fine grained access requestspost
Send a reminder to all approvers of a requestpost
Add a justificationpost
Get request detailsget
Get the summary of request statisticsget
Get statistical view of requestsget
Create a requestpost
Search the requestsget
Execute actions for a list of requestspost
Get statistical summary of requests for approvalget
Get statistical view of requests for approvalget
Search requests of an approverget
Delete all the requests that are filtered by one or more query parameters.delete
Delete a request by iddelete
Get the requestable access list for self.post
Get details of specified requestable access.get

Identity agents
Agent Bridge Support Service
Retrieve the API Client credentials.get
Delete an agent configuration.delete
Update a specific agent configuration.put
Retrieve a specific agent's configuration.get
Retrieve corrupted agent configuration(s) which can't be decrypted due to missing certificateget
Create an agent configuration.post
Retrieve agent configurations.get

Data privacy & consent
Data Privacy and Consent
Provides the data usage approval.post
Presents the data subject information to the user.post
Bulk create or patch consent records.patch
Create or update a consent record.post
Data Privacy and Consent Management
Delete a specific consent record from a tenant.delete
Retrieve a specific consent record.get
Bulk delete consent records.patch
Retrieve a list of consent records.get

Event analytics & reports
Events
Get all events for a tenant.get
Reports
Run a report.post
Gets the details of a download job or gets a CSV report.get
Export reports for a specified tenant into CSV file.post
Generates a report asynchronously for a specified tenant into a CSV file.post

Authentication Configuration
Email One-time Password Configuration 2.0
Update the email one-time password configuration.put
Retrieve the email one-time password configuration.get
One-time Password Configuration 2.0
Update the one-time password configuration.put
Retrieve the one-time password configuration.get
Knowledge Questions Configuration
Update a knowledge questions configuration profile.put
Retrieve a knowledge questions configuration profile.get
Retrieve the list of knowledge questions configuration profiles.get
SMS One-time Password Configuration 2.0
Update the SMS one-time password configuration.put
Retrieve the SMS one-time password configuration.get
Time-based One-time Password Configuration 2.0
Update the time-based one-time password configuration.put
Retrieve the time-based one-time password configuration.get
Voice One-time Password Configuration
Update the voice one-time password configuration.put
Retrieve the voice one-time password configuration.get
Authenticator Clients
Update the metadata attributes of an authenticator client.patch
Update the metadata attributes of an authenticator client.put
Retrieve the metadata of a specific authenticator client.get
Update the editable attributes of a specific authenticator client.patch
Delete a specific authenticator client.delete
Update the editable attributes of a specific authenticator client.put
Retrieve a specific authenticator client.get
Create an authenticator client.post
Retrieve the list of authenticator clients.get
Signature Authentication Configuration
Update the signature authentication methods configuration.patch
Update the signature authentication method configuration.put
Retrieve the signature authentication methods configuration.get

General configuration
API Clients
Gets a YAML response that contains the credentials for a specific client.get
Deletes an API clientdelete
Updates a specific API clientput
Gets a specific API clientget
Bulk deletes the API clientspatch
Create an API Clientpost
Lists the API Clientsget
Session Exchange Configuration
Set the session exchange config.put
Retrieve the configuration for session exchange.get
Tenant Properties API 2.0
Replaces the tenant properties for the specified tenant.put
Retrieves a list of tenant properties for the specified tenant.get
Admin Entitlement Management
Find the admin entitlements that are granted to a user.get
Find the admin entitlements that are granted to the user that is logged in.get
Find the admin entitlements that are granted to a group.get
Publish or discard an admin entitlement.patch
Add or remove one or more children for an admin entitlement.post
Get the children of an admin entitlement.get
Update an admin entitlement.patch
Delete an admin entitlement.delete
Grant or revoke an admin entitlement to one or more users and groups.post
Get an admin entitlement.get
Grant or revoke one or more admin entitlements to a user.post
Get the list of admin entitlements.post
Get the list of user added to or removed from dynamic admin entitlement.post
Grant or revoke one or more admin entitlements to a group.post
Get the list of admin assignments.post
Create an admin entitlement.post
Certificates
Delete a signer certificate.delete
Gets the signer certificate with the given label.get
Imports a signer certificate.post
Gets the list of signer certificates.get
Delete a personal certificate.delete
Update a personal certificate.put
Get a single personal certificate with the specified label.get
Import or generate a personal certificate.post
Gets the list of personal certificates.get
Push Credentials Management
Delete a specific set of configured mobile push provider credentials.delete
Update a specific set of configured mobile push provider credentials.put
Get a specific set of configured mobile push provider credentials.get
Create a set of mobile push provider credentials.post
Get all the sets of configured mobile push provider credentials.get

Password Vault
Password Vault Configuration
Update the password vault configuration.put
Retrieve the password vault configuration.get
Password Vault
Delete a password vault resource.delete
Update a password vault resource.put
Retrieve a password vault resource.get
Delete a password vault enrollment.delete
Update a password vault enrollment.put
Retrieve a password vault enrollment.get

Deprecated APIs
Deprecated - Attribute Evaluation. Replaced by /v2.0/attributequery.
Deprecated - Preview the value that would be computed for this attribute.post
Access Policy Management v3.0 (deprecated)
Deprecated - Delete custom policy of tenant with specified id.delete
Deprecated - Update the policy instance of tenant with specified id.put
Deprecated - Retrieve the details of a particular policy specified with id.get
Deprecated - Create a custom policy for tenant.post
Deprecated - Retrieve list of tenant policies.get
OpenID Connect Consent Management (deprecated)
Deprecated - Bulk scope/entitlement removal of OIDC consents.patch
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get
Deprecated - Deletes a specific OIDC consent.delete
Deprecated - Retrieves a specific OIDC consent.get
Deprecated - Bulk delete, or scope and entitlement removal of OIDC consents.patch
Deprecated - Retrieves the list of OIDC consents.get

IBM Security Verify API
Tenant policy configuration
Set the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedput
Retrieve the configuration for first factor policy. This is a list of policy Id, but only one policy is currently supportedget
Identity Sources V1 - Deprecated
Deprecated - Delete an identity source instance of the tenant with the specified instance ID.delete
Deprecated - Update an identity source instance of the tenant with the specified instance ID.put
Deprecated - Retrieve the details of a particular identity source instance of the tenant with the specified instance ID.get
Deprecated - Retrieve all the identity source instances of the tenant that have this property name and value.get
Deprecated - Retrieve all the identity source instances of the tenant that use the passord policy ID's specified in the 'search' query parameter.get
Deprecated - API to create an identity source instance for a tenant.post
Deprecated - Retrieve all the identity source instances of the tenant.get
Identity Sources V2
V2 Delete an identity source instance of the tenant with the specified instance ID.delete
V2 Update an identity source instance of the tenant with the specified instance ID.put
V2 Retrieve the details of a particular identity source instance of the tenant with the specified instance ID.get
V2 Retrieve all the identity source instances of the tenant that have this property name and value.get
V2 Retrieve all the identity source instances of the tenant that use the passord policy ID's specified in the 'search' query parameter.get
V2 API to create an identity source instance for a tenant.post
V2 Retrieve all the identity source instances of the tenant.get
Certification Campaign assignments v2.0
Updates the list of assignments on a specified campaign instance that belong to a specified tenant.patch
Updates a specified assignment from the specific tenant.put
Retrieves the details of the assignment from the specific tenant.get
Retrieves the list of a assignments associated with the specified campaign instance from the specific tenant.post
Retrieves the list of all assignments associated with the specified campaign instance from the specific tenant.get
Certification Campaign configurations v2.0
Perform operations on a list of campaign configurations that belong to a specified tenant.patch
Creates a campaign configuration for the specific tenant.post
Retrieves a list of campaign configurations from the specific tenant.get
Retrieves the details of the Reviewer Types available for the specific Campaign Type.get
Updates the campaign configuration for a specified campaign configuration from the specific tenant.put
Retrieves the details of the campaign configuration from the specific tenant.get
Certification Campaign instances v2.0
Perform an operation on a specified campaign instance that belong to a specified tenant.put
Retrieves the details of the campaign instance from the specific tenant.get
Creates a preview campaign configuration for the specified tenant.post
Retrieves the list of a campaign instances associated with the specified campaign configuration from the specific tenant.get
Perform operations on a collection of campaign instances that belong to a specific tenant.patch
Retrieves the list of a campaign instances from the specific tenant.get
Certification Campaign statistics v2.0
Retrieves the campaign instance statistics from the specific tenant.get
Retrieves the campaign configuration statistics from the specific tenant.get
Retrieves the assignment statistics of the campaign instance from the specific tenant.get
Retrieves statistics of specific assignments within a given instance from the specific tenant.get
Certification Campaign assignments v1.0 - Deprecated
Deprecated - Add new assignments to a continuous campaign.post
Deprecated - Refresh assignments in a continuous campaign.post
Deprecated - Modify a given set of assignments.patch
Deprecated - Retrieve all assignments in a given campaign instance.post
Deprecated - Retrieve all assignments, in a given campaign instance.get
Deprecated - Modify a given set of assignments.patch
Deprecated - Add new assignments to a continuous campaign instance.post
Deprecated - Modify a given assignment.put
Deprecated - Retrieve a specific assignment.get
Deprecated - Modify a given assignment.put
Deprecated - Retrieve a specific assignment.get
Deprecated - Retrieve all assignments in a given campaign instance.post
Deprecated - Retrieve all assignments in a given campaign instanceget
Certification Campaign configurations v1.0 - Deprecated
Deprecated - Update the certification manager schema.put
Update the certification manager schema.put
Deprecated - Edit campaign configurations.patch
Deprecated - Create a campaign configuration.post
Deprecated - Retrieve the campaign configurations.get
Deprecated - Delete specific campaign configuration.delete
Deprecated - Edit specific campaign configuration.put
Deprecated - Retrieve a specific campaign configuration.get
Certification Campaign instances v1.0 - Deprecated
Deprecated - Retrieve instances corresponding to a specific campaign configuration.get
Deprecated - Create a preview campaign.post
Deprecated - Retrieve specific campaign instance.get
Deprecated - Retrieve campaign instances.get
Deprecated - Modify specific campaign instance.put
Deprecated - Retrieve a specific campaign instance.get
Deprecated - Retrieve instances corresponding to a specific campaign configuration.get
Deprecated - Modify campaign instances.patch
Deprecated - Retrieve campaign instances.get
Certification Campaign statistics v1.0 - Deprecated
Deprecated - Retrieve statistics of specific assignments.get
Deprecated - Retrieve statistics of specific campaign instances.get
Deprecated - Retrieve campaign statistics.get
Deprecated - Retrieve statistics of specific campaign instances.get
Deprecated - Retrieve statistics of specific assignments.get
Deprecated - Retrieve statistics of specific assignments within a given instance.get
Deprecated - Retrieve statistics of specific assignments within a given instance.get
Dictionary Policy Management 3.0
Modifies the specified password dictionary policy in Cloud Directory.patch
Deletes a password dictionary policy from a specified tenant in Cloud Directory. Can only delete a password dictionary policy that is not predefined.delete
Fetches the specified password dictionary policy in Cloud Directory.get
Create a password dictionary policy on the given tenantpost
Fetches a list of password dictionary policies in Cloud Directory.get
Modifies the password dictionary policy in Cloud Directory.patch
Fetches the password dictionary policy in Cloud Directory.get
Password Dictionary Management 3.0
Deletes a CSV import request from the specified tenant.delete
Cancels a CSV import request for the specified tenant.put
Retrieves the details of a CSV import request that belong to the specified tenant.get
Retrieves a list of CSV import requests that belong to the specified tenant.get
Import password dictionary for the specified tenant from a comma separated value (CSV) file.post
Get the list of supported header names.get
Export the password dictionary from the specified tenant as a comma separated value (CSV) file.get
Add or remove passwords from the tenant password dictionary in Cloud Directory.patch
Deletes all passwords from a specified tenant dictionary.delete
Password Policy Management 3.0
Validate a password against a specific policy ID on a specific tenant.post
Generate a password that satisfies the passwordStrength attributes in the given password policy.get
This API is used to get the password policy labels for a specified password policy on a given tenant using the specified locale.get
Modify a password policy's attributes in Cloud Directory. It can be used to update one or more attributes.patch
Deletes a password policy from a specified tenant in Cloud Directory. Can only delete a password policy that is not predefined.delete
Get a password policy with a given id for a specified tenant.get
Create a password policy on the given tenantpost
Get all password policies for a specified tenant.get
FIDO MDS Configuration
External MFA Providers
Retrieve the list of enrollments for all external MFA providers.get
Continue an authentication attempt via an external MFA provider.post
Retrieve the status of an authentication attempt.get
Clears all cached enrollments of specific user for an external MFA providerdelete
Action an authentication attempt via an external MFA provider.post
Retrieve the list of enrollments for an external MFA provider.get
Retrieve the list of external MFA providers.get
Delete an external MFA provider configuration.delete
Update an external MFA provider configuration.put
Retrieve an external MFA provider configuration.get
Create an external MFA provider configuration.post
Retrieve the list of external MFA provider configurations.get
Well-Known Uniform Resource Identifiers
Fetch the service's history of the assetlinks.json file for Android.get
Fetch the service's history of the apple-app-site-association file for iOS.get
Update digital asset link file for Android verifiable links.put
Update the apple app site association file for iOS verifiable links.put
Access Management
Find the children of an application entitlement either requestable or requested or granted to a specific user.get
Fetch the access assignments of specific user.post
Get user access assignments statistics.get
Get user access assignments in active and fulfillment failed state.post
Find the children of an entitlement either requestable or requested or granted to self.get
Device manager configuration
Lists uniqueuseridentifiersget
Deletes your own devicedelete
Lists your own device informationget
Delete user devicedelete
Lists device informationget
Test a device manager connectionput
PATCH a device manager configuration.patch
Delete a device manager configuration.delete
Update a device manager configurationput
Get a device-managerget
Get trusted certificates as a zip file.get
Test a device manager connectionpost
Create a device manager configuration.post
Lists device managersget
Smartcard and other X.509 certificate provider configuration
Update a smartcard or X.509 certificate provider with PATCHpatch
Delete a smartcard or X.509 certificate providerdelete
Update a smartcard or X.509 certificate provider.put
Get a smartcard and other X.509 certificate providersget
Lists attributes and uniqueUserIdentifiers for a X.509 compliant certificate.get
Create a smartcard and other X.509 certificate provider.post
Lists smartcard and other X.509 certificate providers.get
Smartcard or certificate provider operations
Remove smartcard/X.509 certificate provider certificates for a specified user id.delete
OpenID Connect Token Types
Delete a custom OIDC token typedelete
Update a custom OIDC Token Typeput
Read a custom OIDC token typeget
Create a custom OIDC token typepost
Retrieves the list of custom OIDC token types.get
Threat Insights Configurations API
Delete the threat configuration for specified tenant for given configuration iddelete
Update the threat configuration Status for specified tenant and configuration idput
Update the threat configuration for specified tenant for given configuration idput
Fetch threat configuration for specified tenant and configuration idget
Create the threat configuration for specified tenantpost
Fetch threat default configuration for specified tenantget
Webhook-Configuration
Tests a resource of a configured webhookget
Test a configured webhookget
Current webhook statusget
Get webhook healthget
Remove a dead letterdelete
Retrieve a dead letterget
Initiate a reconciliation of deadletterspost
View the state of a deadletter reconciliationget
View the total number of deadletters a webhookget
Remove webhook dead lettersdelete
Fetch webhook dead lettersget
Delete a webhhookdelete
Update a Webhookput
Fetch a Webhookget
Develop an transformpost
List Webhook Purposesget
Preflight a webhook configurationpost
Preflight a webhook configurationpost
Create a Webhookpost
List Webhooksget

400Bad Request.