SecurityEnforcementPostureDto
A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.
Values
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
Fields
| Field | Type | Description | ||||||
|---|---|---|---|---|---|---|---|---|
mfaRequirement
required |
MfaRequirement MfaRequirement | Whether a second factor is optional, required or turned off for this account.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
mfaRequirementSource
required |
MfaRequirementSource MfaRequirementSource | Which switch decided `mfaRequirement`.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
usersCanChangeMfa
required |
boolean | Whether the account holder may turn their own second factor on and off.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
idleTimeoutMinutes
required |
integer (int32) | How many minutes of inactivity end the session, from the tenant's idle-circuit setting.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
preventConcurrentLogin
required |
boolean | Whether the tenant allows only one concurrent login per account.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
signInIpRestrictionEnforced
required |
boolean | Whether interactive portal access is restricted by source address.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
administratorPasskeyRequired
required |
boolean | Whether the administrator passkey policy's Required value reaches this account: the passkey is its
only second factor, unless an exception is live.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
administratorPasskeyExceptionEndsAt
required |
string (date-time) | When this account's live exception to the administrator passkey policy ends, in UTC, or
`null` when none is live. While it is, the account may sign in with an authenticator app.
nullable
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
passwordRules
required |
SecurityPasswordRulesEnforcementDto SecurityPasswordRulesEnforcementDto | The password and lockout rules in force for the tenant, as the PCI DSS password policy leaves
them: the effective values, so they reflect the policy switch and its bounds.
Values:
Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.
| ||||||
Fields of SecurityPasswordRulesEnforcementDto: This body has no documented fields. | ||||||||
This model has no documented fields.