Security & SSO Endpoints
Security & Single Sign-On
SecurityCheck
GET /SecurityCheck
Performs a security check.
GET /SecurityCheck/oldencryption
Performs a security check using old encryption.
SecurityQuestion
GET /SecurityQuestion
List all security questions.
POST /SecurityQuestion
Create or update security questions.
Request Body: Array of SecurityQuestion objects.
GET /SecurityQuestion/{id}
Summary: Get one SecurityQuestion
Returns a single SecurityQuestion instance. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Security question ID |
includedetails | boolean (query) | Include additional details |
DELETE /SecurityQuestion/{id}
Delete a security question by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Security question ID |
SecurityQuestionValidate
GET /SecurityQuestionValidate
List or retrieve security question validation data.
POST /SecurityQuestionValidate
Submit security question validation results.
Request Body: Array of NPR_Result objects.
SingleSignOnApplication
GET /SingleSignOnApplication
List all SSO application configurations.
POST /SingleSignOnApplication
Create or update SSO applications.
Request Body: Array of SingleSignOnApplication objects.
GET /SingleSignOnApplication/{id}
Get a single SSO application by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | SSO application ID |
DELETE /SingleSignOnApplication/{id}
Delete an SSO application by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | SSO application ID |
SingleSignOnAttempt
GET /SingleSignOnAttempt
List all SSO attempt records.
GET /SingleSignOnAttempt/{id}
Get a single SSO attempt record by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (int64, path, required) | SSO attempt ID |
DELETE /SingleSignOnAttempt/{id}
Delete an SSO attempt record by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (int64, path, required) | SSO attempt ID |
AzureADConnection
GET /azureadconnection
Summary: List of AzureADConnection
Returns multiple Azure AD connection configurations. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
authorized | boolean (query) | Filter by authorized status |
isintune | boolean (query) | Filter by Intune-enabled connections |
type | integer (query) | Filter by connection type |
types | string (query) | Comma-separated list of connection types |
POST /azureadconnection
Create or update Azure AD connections.
Request Body: Array of AzureADConnection objects.
GET /azureadconnection/{id}
Summary: Get one AzureADConnection
Returns a single Azure AD connection. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Connection ID |
includedetails | boolean (query) | Include full connection details |
includetenants | boolean (query) | Include tenant information |
DELETE /azureadconnection/{id}
Delete an Azure AD connection by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Connection ID |
AzureADMapping
GET /azureadmapping
Summary: List of AzureADMapping
Returns Azure AD field mappings. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
connection_id | integer (query) | Filter mappings by Azure AD connection ID |
LDAPConnection
GET /LDAPConnection
Summary: List of LDAPConnection
Returns multiple LDAP connection configurations. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
clientidoverride | string (query) | Override the client ID context |
POST /LDAPConnection
Create or update LDAP connections.
Request Body: Array of LDAPConnection objects.
GET /LDAPConnection/{id}
Summary: Get one LDAPConnection
Returns a single LDAP connection. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Connection ID |
clientidoverride | string (query) | Override the client ID context |
includedetails | boolean (query) | Include full connection details |
DELETE /LDAPConnection/{id}
Delete an LDAP connection by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Connection ID |
KeyVault
GET /KeyVault
List all Key Vault configurations.
POST /KeyVault
Create or update Key Vault entries.
Request Body: Array of KeyVault objects.
GET /KeyVault/{id}
Get a single Key Vault entry by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Key Vault entry ID |
DELETE /KeyVault/{id}
Delete a Key Vault entry by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Key Vault entry ID |
SecureSecretLink
GET /SecureSecretLink
List all secure secret links.
POST /SecureSecretLink
Create or update secure secret links.
Request Body: Array of SecureSecretLink objects.
GET /SecureSecretLink/{id}
Get a single secure secret link by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Secure secret link ID |
DELETE /SecureSecretLink/{id}
Delete a secure secret link by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Secure secret link ID |
GET /SecureSecretLink/validate
Validate a secure secret link using a token and optional passphrase.
Parameters:
| Name | Type | Description |
|---|---|---|
token | string (query) | The link token to validate |
passphrase | string (query) | Optional passphrase for the link |
ImpersonationRequest
POST /ImpersonationRequest
Submit an impersonation request (for agent-to-user/agent context switching).
Request Body: ImpersonationRequest object.
AuditPasswordField
GET /PasswordField
List all audited password fields.
POST /PasswordField
Create or update audited password fields.
Request Body: Array of AuditPasswordField objects.
GET /PasswordField/{id}
Summary: Get one AuditPasswordField
Returns a single audited password field. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Password field ID |
includedetails | boolean (query) | Include additional details |
Audit
GET /Audit
List all audit records.
POST /Audit
Create or update audit records.
Request Body: Array of Audit objects.
GET /Audit/{id}
Summary: Get one Audit
Returns a single audit record. Requires authentication.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Audit record ID |
includedetails | boolean (query) | Include additional details |
DELETE /Audit/{id}
Delete an audit record by ID.
Parameters:
| Name | Type | Description |
|---|---|---|
id | integer (path, required) | Audit record ID |