create Tenant

POST {{baseUrl}}/api/tenant

Creates a tenant. You can optionally specify an Id for the tenant, if not provided one will be generated.

Request Body

{"sourceTenantId"=>"<uuid>", "tenant"=>{"accessControlConfiguration"=>{"uiIPAccessControlListId"=>"<uuid>"}, "captchaConfiguration"=>{"captchaMethod"=>"GoogleRecaptchaV2", "secretKey"=>"<string>", "siteKey"=>"<string>", "threshold"=>"<double>", "enabled"=>"<boolean>"}, "configured"=>"<boolean>", "connectorPolicies"=>[{"connectorId"=>"<uuid>", "migrate"=>"<boolean>"}, {"connectorId"=>"<uuid>", "migrate"=>"<boolean>"}], "emailConfiguration"=>{"additionalHeaders"=>[{"name"=>"<string>", "value"=>"<string>"}, {"name"=>"<string>", "value"=>"<string>"}], "debug"=>"<boolean>", "defaultFromEmail"=>"<string>", "defaultFromName"=>"<string>", "emailUpdateEmailTemplateId"=>"<uuid>", "emailVerifiedEmailTemplateId"=>"<uuid>", "forgotPasswordEmailTemplateId"=>"<uuid>", "host"=>"<string>", "implicitEmailVerificationAllowed"=>"<boolean>", "loginIdInUseOnCreateEmailTemplateId"=>"<uuid>", "loginIdInUseOnUpdateEmailTemplateId"=>"<uuid>", "loginNewDeviceEmailTemplateId"=>"<uuid>", "loginSuspiciousEmailTemplateId"=>"<uuid>", "password"=>"<string>", "passwordResetSuccessEmailTemplateId"=>"<uuid>", "passwordUpdateEmailTemplateId"=>"<uuid>", "passwordlessEmailTemplateId"=>"<uuid>", "port"=>"<integer>", "properties"=>"<string>", "security"=>"SSL", "setPasswordEmailTemplateId"=>"<uuid>", "twoFactorMethodAddEmailTemplateId"=>"<uuid>", "twoFactorMethodRemoveEmailTemplateId"=>"<uuid>", "unverified"=>{"allowEmailChangeWhenGated"=>"<boolean>", "behavior"=>"Allow"}, "username"=>"<string>", "verificationEmailTemplateId"=>"<uuid>", "verificationStrategy"=>"ClickableLink", "verifyEmail"=>"<boolean>", "verifyEmailWhenChanged"=>"<boolean>"}, "eventConfiguration"=>{"events"=>{"non4"=>{"transactionType"=>"None", "enabled"=>"<boolean>"}}}, "externalIdentifierConfiguration"=>{"authorizationGrantIdTimeToLiveInSeconds"=>"<integer>", "changePasswordIdGenerator"=>{"length"=>"<integer>", "type"=>"randomDigits"}, "changePasswordIdTimeToLiveInSeconds"=>"<integer>", "deviceCodeTimeToLiveInSeconds"=>"<integer>", "deviceUserCodeIdGenerator"=>{"length"=>"<integer>", "type"=>"randomAlphaNumeric"}, "emailVerificationIdGenerator"=>{"length"=>"<integer>", "type"=>"randomBytes"}, "emailVerificationIdTimeToLiveInSeconds"=>"<integer>", "emailVerificationOneTimeCodeGenerator"=>{"length"=>"<integer>", "type"=>"randomDigits"}, "externalAuthenticationIdTimeToLiveInSeconds"=>"<integer>", "oneTimePasswordTimeToLiveInSeconds"=>"<integer>", "passwordlessLoginGenerator"=>{"length"=>"<integer>", "type"=>"randomBytes"}, "passwordlessLoginTimeToLiveInSeconds"=>"<integer>", "pendingAccountLinkTimeToLiveInSeconds"=>"<integer>", "registrationVerificationIdGenerator"=>{"length"=>"<integer>", "type"=>"randomDigits"}, "registrationVerificationIdTimeToLiveInSeconds"=>"<integer>", "registrationVerificationOneTimeCodeGenerator"=>{"length"=>"<integer>", "type"=>"randomBytes"}, "rememberOAuthScopeConsentChoiceTimeToLiveInSeconds"=>"<integer>", "samlv2AuthNRequestIdTimeToLiveInSeconds"=>"<integer>", "setupPasswordIdGenerator"=>{"length"=>"<integer>", "type"=>"randomBytes"}, "setupPasswordIdTimeToLiveInSeconds"=>"<integer>", "trustTokenTimeToLiveInSeconds"=>"<integer>", "twoFactorIdTimeToLiveInSeconds"=>"<integer>", "twoFactorOneTimeCodeIdGenerator"=>{"length"=>"<integer>", "type"=>"randomDigits"}, "twoFactorOneTimeCodeIdTimeToLiveInSeconds"=>"<integer>", "twoFactorTrustIdTimeToLiveInSeconds"=>"<integer>", "webAuthnAuthenticationChallengeTimeToLiveInSeconds"=>"<integer>", "webAuthnRegistrationChallengeTimeToLiveInSeconds"=>"<integer>"}, "failedAuthenticationConfiguration"=>{"actionCancelPolicy"=>{"onPasswordReset"=>"<boolean>"}, "actionDuration"=>"<long>", "actionDurationUnit"=>"WEEKS", "emailUser"=>"<boolean>", "resetCountInSeconds"=>"<integer>", "tooManyAttempts"=>"<integer>", "userActionId"=>"<uuid>"}, "familyConfiguration"=>{"allowChildRegistrations"=>"<boolean>", "confirmChildEmailTemplateId"=>"<uuid>", "deleteOrphanedAccounts"=>"<boolean>", "deleteOrphanedAccountsDays"=>"<integer>", "familyRequestEmailTemplateId"=>"<uuid>", "maximumChildAge"=>"<integer>", "minimumOwnerAge"=>"<integer>", "parentEmailRequired"=>"<boolean>", "parentRegistrationEmailTemplateId"=>"<uuid>", "enabled"=>"<boolean>"}, "formConfiguration"=>{"adminUserFormId"=>"<uuid>"}, "httpSessionMaxInactiveInterval"=>"<integer>", "id"=>"<uuid>", "insertInstant"=>"<long>", "issuer"=>"<string>", "jwtConfiguration"=>{"accessTokenKeyId"=>"<uuid>", "idTokenKeyId"=>"<uuid>", "refreshTokenExpirationPolicy"=>"SlidingWindowWithMaximumLifetime", "refreshTokenRevocationPolicy"=>{"onLoginPrevented"=>"<boolean>", "onMultiFactorEnable"=>"<boolean>", "onPasswordChanged"=>"<boolean>"}, "refreshTokenSlidingWindowConfiguration"=>{"maximumTimeToLiveInMinutes"=>"<integer>"}, "refreshTokenTimeToLiveInMinutes"=>"<integer>", "refreshTokenUsagePolicy"=>"OneTimeUse", "timeToLiveInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "lambdaConfiguration"=>{"scimEnterpriseUserRequestConverterId"=>"<uuid>", "scimEnterpriseUserResponseConverterId"=>"<uuid>", "scimGroupRequestConverterId"=>"<uuid>", "scimGroupResponseConverterId"=>"<uuid>", "scimUserRequestConverterId"=>"<uuid>", "scimUserResponseConverterId"=>"<uuid>"}, "lastUpdateInstant"=>"<long>", "loginConfiguration"=>{"requireAuthentication"=>"<boolean>"}, "logoutURL"=>"<string>", "maximumPasswordAge"=>{"days"=>"<integer>", "enabled"=>"<boolean>"}, "minimumPasswordAge"=>{"seconds"=>"<integer>", "enabled"=>"<boolean>"}, "multiFactorConfiguration"=>{"authenticator"=>{"algorithm"=>"HmacSHA512", "codeLength"=>"<integer>", "timeStep"=>"<integer>", "enabled"=>"<boolean>"}, "email"=>{"templateId"=>"<uuid>", "enabled"=>"<boolean>"}, "loginPolicy"=>"Disabled", "sms"=>{"messengerId"=>"<uuid>", "templateId"=>"<uuid>", "enabled"=>"<boolean>"}}, "name"=>"<string>", "oauthConfiguration"=>{"clientCredentialsAccessTokenPopulateLambdaId"=>"<uuid>"}, "passwordEncryptionConfiguration"=>{"encryptionScheme"=>"<string>", "encryptionSchemeFactor"=>"<integer>", "modifyEncryptionSchemeOnLogin"=>"<boolean>"}, "passwordValidationRules"=>{"breachDetection"=>{"matchMode"=>"High", "notifyUserEmailTemplateId"=>"<uuid>", "onLogin"=>"Off", "enabled"=>"<boolean>"}, "maxLength"=>"<integer>", "minLength"=>"<integer>", "rememberPreviousPasswords"=>{"count"=>"<integer>", "enabled"=>"<boolean>"}, "requireMixedCase"=>"<boolean>", "requireNonAlpha"=>"<boolean>", "requireNumber"=>"<boolean>", "validateOnLogin"=>"<boolean>"}, "rateLimitConfiguration"=>{"failedLogin"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "forgotPassword"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "sendEmailVerification"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "sendPasswordless"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "sendRegistrationVerification"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}, "sendTwoFactor"=>{"limit"=>"<integer>", "timePeriodInSeconds"=>"<integer>", "enabled"=>"<boolean>"}}, "scimServerConfiguration"=>{"clientEntityTypeId"=>"<uuid>", "serverEntityTypeId"=>"<uuid>", "enabled"=>"<boolean>"}, "ssoConfiguration"=>{"deviceTrustTimeToLiveInSeconds"=>"<integer>"}, "state"=>"Active", "themeId"=>"<uuid>", "userDeletePolicy"=>{"unverified"=>{"enabledInstant"=>"<long>", "numberOfDaysToRetain"=>"<integer>", "enabled"=>"<boolean>"}}, "usernameConfiguration"=>{"unique"=>{"numberOfDigits"=>"<integer>", "separator"=>"<string>", "strategy"=>"Always", "enabled"=>"<boolean>"}}, "webAuthnConfiguration"=>{"bootstrapWorkflow"=>{"authenticatorAttachmentPreference"=>"platform", "userVerificationRequirement"=>"preferred", "enabled"=>"<boolean>"}, "debug"=>"<boolean>", "reauthenticationWorkflow"=>{"authenticatorAttachmentPreference"=>"crossPlatform", "userVerificationRequirement"=>"preferred", "enabled"=>"<boolean>"}, "relyingPartyId"=>"<string>", "relyingPartyName"=>"<string>", "enabled"=>"<boolean>"}}, "webhookIds"=>["<uuid>", "<uuid>"], "eventInfo"=>{"deviceDescription"=>"<string>", "deviceName"=>"<string>", "deviceType"=>"<string>", "ipAddress"=>"<string>", "location"=>{"city"=>"<string>", "country"=>"<string>", "latitude"=>"<double>", "longitude"=>"<double>", "region"=>"<string>", "zipcode"=>"<string>", "displayString"=>"<string>"}, "os"=>"<string>", "userAgent"=>"<string>"}}

HEADERS

KeyDatatypeRequiredDescription
X-FusionAuth-TenantIdstringThe unique Id of the tenant used to scope this API request. Only required when there is more than one tenant and the API key is not tenant-scoped.
Content-Typestring
Acceptstring

RESPONSES

status: OK

{&quot;tenant&quot;:{&quot;data&quot;:{&quot;Duis_5&quot;:{},&quot;officiae&quot;:{}},&quot;accessControlConfiguration&quot;:{&quot;uiIPAccessControlListId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;captchaConfiguration&quot;:{&quot;captchaMethod&quot;:&quot;GoogleRecaptchaV2&quot;,&quot;secretKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;siteKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;threshold&quot;:&quot;\u003cdouble\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;configured&quot;:&quot;\u003cboolean\u003e&quot;,&quot;connectorPolicies&quot;:[{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;nisic5&quot;:{},&quot;veniam_e48&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;},{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;pariatur_a89&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;}],&quot;emailConfiguration&quot;:{&quot;additionalHeaders&quot;:[{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;},{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;}],&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;defaultFromEmail&quot;:&quot;\u003cstring\u003e&quot;,&quot;defaultFromName&quot;:&quot;\u003cstring\u003e&quot;,&quot;emailUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;emailVerifiedEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;forgotPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;host&quot;:&quot;\u003cstring\u003e&quot;,&quot;implicitEmailVerificationAllowed&quot;:&quot;\u003cboolean\u003e&quot;,&quot;loginIdInUseOnCreateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginIdInUseOnUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginNewDeviceEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginSuspiciousEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;password&quot;:&quot;\u003cstring\u003e&quot;,&quot;passwordResetSuccessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordlessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;port&quot;:&quot;\u003cinteger\u003e&quot;,&quot;properties&quot;:&quot;\u003cstring\u003e&quot;,&quot;security&quot;:&quot;NONE&quot;,&quot;setPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodAddEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodRemoveEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;unverified&quot;:{&quot;allowEmailChangeWhenGated&quot;:&quot;\u003cboolean\u003e&quot;,&quot;behavior&quot;:&quot;Gated&quot;},&quot;username&quot;:&quot;\u003cstring\u003e&quot;,&quot;verificationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;verificationStrategy&quot;:&quot;ClickableLink&quot;,&quot;verifyEmail&quot;:&quot;\u003cboolean\u003e&quot;,&quot;verifyEmailWhenChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;eventConfiguration&quot;:{&quot;events&quot;:{&quot;sint0&quot;:{&quot;transactionType&quot;:&quot;Any&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;in_689&quot;:{&quot;transactionType&quot;:&quot;AbsoluteMajority&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}}},&quot;externalIdentifierConfiguration&quot;:{&quot;authorizationGrantIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;changePasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlphaNumeric&quot;},&quot;changePasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceCodeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceUserCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;emailVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;emailVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;emailVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;externalAuthenticationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;oneTimePasswordTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;passwordlessLoginGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;passwordlessLoginTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;pendingAccountLinkTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;registrationVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlphaNumeric&quot;},&quot;rememberOAuthScopeConsentChoiceTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;samlv2AuthNRequestIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;setupPasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomBytes&quot;},&quot;setupPasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;trustTokenTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorOneTimeCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;twoFactorOneTimeCodeIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorTrustIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnAuthenticationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnRegistrationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;failedAuthenticationConfiguration&quot;:{&quot;actionCancelPolicy&quot;:{&quot;onPasswordReset&quot;:&quot;\u003cboolean\u003e&quot;},&quot;actionDuration&quot;:&quot;\u003clong\u003e&quot;,&quot;actionDurationUnit&quot;:&quot;MINUTES&quot;,&quot;emailUser&quot;:&quot;\u003cboolean\u003e&quot;,&quot;resetCountInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;tooManyAttempts&quot;:&quot;\u003cinteger\u003e&quot;,&quot;userActionId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;familyConfiguration&quot;:{&quot;allowChildRegistrations&quot;:&quot;\u003cboolean\u003e&quot;,&quot;confirmChildEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;deleteOrphanedAccounts&quot;:&quot;\u003cboolean\u003e&quot;,&quot;deleteOrphanedAccountsDays&quot;:&quot;\u003cinteger\u003e&quot;,&quot;familyRequestEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;maximumChildAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minimumOwnerAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;parentEmailRequired&quot;:&quot;\u003cboolean\u003e&quot;,&quot;parentRegistrationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;formConfiguration&quot;:{&quot;adminUserFormId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;httpSessionMaxInactiveInterval&quot;:&quot;\u003cinteger\u003e&quot;,&quot;id&quot;:&quot;\u003cuuid\u003e&quot;,&quot;insertInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;issuer&quot;:&quot;\u003cstring\u003e&quot;,&quot;jwtConfiguration&quot;:{&quot;accessTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;idTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;refreshTokenExpirationPolicy&quot;:&quot;SlidingWindow&quot;,&quot;refreshTokenRevocationPolicy&quot;:{&quot;onLoginPrevented&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onMultiFactorEnable&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onPasswordChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;refreshTokenSlidingWindowConfiguration&quot;:{&quot;maximumTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;},&quot;refreshTokenTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;,&quot;refreshTokenUsagePolicy&quot;:&quot;Reusable&quot;,&quot;timeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;lambdaConfiguration&quot;:{&quot;scimEnterpriseUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimEnterpriseUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;lastUpdateInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;loginConfiguration&quot;:{&quot;requireAuthentication&quot;:&quot;\u003cboolean\u003e&quot;},&quot;logoutURL&quot;:&quot;\u003cstring\u003e&quot;,&quot;maximumPasswordAge&quot;:{&quot;days&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;minimumPasswordAge&quot;:{&quot;seconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;multiFactorConfiguration&quot;:{&quot;authenticator&quot;:{&quot;algorithm&quot;:&quot;HmacSHA256&quot;,&quot;codeLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timeStep&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;email&quot;:{&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;loginPolicy&quot;:&quot;Enabled&quot;,&quot;sms&quot;:{&quot;messengerId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;oauthConfiguration&quot;:{&quot;clientCredentialsAccessTokenPopulateLambdaId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;passwordEncryptionConfiguration&quot;:{&quot;encryptionScheme&quot;:&quot;\u003cstring\u003e&quot;,&quot;encryptionSchemeFactor&quot;:&quot;\u003cinteger\u003e&quot;,&quot;modifyEncryptionSchemeOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;passwordValidationRules&quot;:{&quot;breachDetection&quot;:{&quot;matchMode&quot;:&quot;High&quot;,&quot;notifyUserEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;onLogin&quot;:&quot;NotifyUser&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;maxLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;rememberPreviousPasswords&quot;:{&quot;count&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;requireMixedCase&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNonAlpha&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNumber&quot;:&quot;\u003cboolean\u003e&quot;,&quot;validateOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;rateLimitConfiguration&quot;:{&quot;failedLogin&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;forgotPassword&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendEmailVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendPasswordless&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendRegistrationVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendTwoFactor&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;registrationConfiguration&quot;:{},&quot;scimServerConfiguration&quot;:{&quot;clientEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;schemas&quot;:{&quot;mollitc&quot;:{},&quot;dolor_0&quot;:{},&quot;adipisicing457&quot;:{}},&quot;serverEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;ssoConfiguration&quot;:{&quot;deviceTrustTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;state&quot;:&quot;Inactive&quot;,&quot;themeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;userDeletePolicy&quot;:{&quot;unverified&quot;:{&quot;enabledInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;numberOfDaysToRetain&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;usernameConfiguration&quot;:{&quot;unique&quot;:{&quot;numberOfDigits&quot;:&quot;\u003cinteger\u003e&quot;,&quot;separator&quot;:&quot;\u003cstring\u003e&quot;,&quot;strategy&quot;:&quot;Always&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;webAuthnConfiguration&quot;:{&quot;bootstrapWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;platform&quot;,&quot;userVerificationRequirement&quot;:&quot;preferred&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;reauthenticationWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;platform&quot;,&quot;userVerificationRequirement&quot;:&quot;preferred&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;relyingPartyId&quot;:&quot;\u003cstring\u003e&quot;,&quot;relyingPartyName&quot;:&quot;\u003cstring\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;tenants&quot;:[{&quot;data&quot;:{&quot;ut_585&quot;:{},&quot;irure_4&quot;:{}},&quot;accessControlConfiguration&quot;:{&quot;uiIPAccessControlListId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;captchaConfiguration&quot;:{&quot;captchaMethod&quot;:&quot;HCaptcha&quot;,&quot;secretKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;siteKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;threshold&quot;:&quot;\u003cdouble\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;configured&quot;:&quot;\u003cboolean\u003e&quot;,&quot;connectorPolicies&quot;:[{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;magna_2&quot;:{},&quot;commodo_84&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;},{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;nona&quot;:{},&quot;aliqua41&quot;:{},&quot;aliquip567&quot;:{},&quot;consequat_f4&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;}],&quot;emailConfiguration&quot;:{&quot;additionalHeaders&quot;:[{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;},{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;}],&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;defaultFromEmail&quot;:&quot;\u003cstring\u003e&quot;,&quot;defaultFromName&quot;:&quot;\u003cstring\u003e&quot;,&quot;emailUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;emailVerifiedEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;forgotPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;host&quot;:&quot;\u003cstring\u003e&quot;,&quot;implicitEmailVerificationAllowed&quot;:&quot;\u003cboolean\u003e&quot;,&quot;loginIdInUseOnCreateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginIdInUseOnUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginNewDeviceEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginSuspiciousEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;password&quot;:&quot;\u003cstring\u003e&quot;,&quot;passwordResetSuccessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordlessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;port&quot;:&quot;\u003cinteger\u003e&quot;,&quot;properties&quot;:&quot;\u003cstring\u003e&quot;,&quot;security&quot;:&quot;NONE&quot;,&quot;setPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodAddEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodRemoveEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;unverified&quot;:{&quot;allowEmailChangeWhenGated&quot;:&quot;\u003cboolean\u003e&quot;,&quot;behavior&quot;:&quot;Allow&quot;},&quot;username&quot;:&quot;\u003cstring\u003e&quot;,&quot;verificationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;verificationStrategy&quot;:&quot;FormField&quot;,&quot;verifyEmail&quot;:&quot;\u003cboolean\u003e&quot;,&quot;verifyEmailWhenChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;eventConfiguration&quot;:{&quot;events&quot;:{&quot;incididuntcb_&quot;:{&quot;transactionType&quot;:&quot;AbsoluteMajority&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}}},&quot;externalIdentifierConfiguration&quot;:{&quot;authorizationGrantIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;changePasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlphaNumeric&quot;},&quot;changePasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceCodeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceUserCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;emailVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomBytes&quot;},&quot;emailVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;emailVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;externalAuthenticationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;oneTimePasswordTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;passwordlessLoginGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;passwordlessLoginTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;pendingAccountLinkTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;registrationVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;rememberOAuthScopeConsentChoiceTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;samlv2AuthNRequestIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;setupPasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomBytes&quot;},&quot;setupPasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;trustTokenTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorOneTimeCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomBytes&quot;},&quot;twoFactorOneTimeCodeIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorTrustIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnAuthenticationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnRegistrationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;failedAuthenticationConfiguration&quot;:{&quot;actionCancelPolicy&quot;:{&quot;onPasswordReset&quot;:&quot;\u003cboolean\u003e&quot;},&quot;actionDuration&quot;:&quot;\u003clong\u003e&quot;,&quot;actionDurationUnit&quot;:&quot;HOURS&quot;,&quot;emailUser&quot;:&quot;\u003cboolean\u003e&quot;,&quot;resetCountInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;tooManyAttempts&quot;:&quot;\u003cinteger\u003e&quot;,&quot;userActionId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;familyConfiguration&quot;:{&quot;allowChildRegistrations&quot;:&quot;\u003cboolean\u003e&quot;,&quot;confirmChildEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;deleteOrphanedAccounts&quot;:&quot;\u003cboolean\u003e&quot;,&quot;deleteOrphanedAccountsDays&quot;:&quot;\u003cinteger\u003e&quot;,&quot;familyRequestEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;maximumChildAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minimumOwnerAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;parentEmailRequired&quot;:&quot;\u003cboolean\u003e&quot;,&quot;parentRegistrationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;formConfiguration&quot;:{&quot;adminUserFormId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;httpSessionMaxInactiveInterval&quot;:&quot;\u003cinteger\u003e&quot;,&quot;id&quot;:&quot;\u003cuuid\u003e&quot;,&quot;insertInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;issuer&quot;:&quot;\u003cstring\u003e&quot;,&quot;jwtConfiguration&quot;:{&quot;accessTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;idTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;refreshTokenExpirationPolicy&quot;:&quot;Fixed&quot;,&quot;refreshTokenRevocationPolicy&quot;:{&quot;onLoginPrevented&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onMultiFactorEnable&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onPasswordChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;refreshTokenSlidingWindowConfiguration&quot;:{&quot;maximumTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;},&quot;refreshTokenTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;,&quot;refreshTokenUsagePolicy&quot;:&quot;OneTimeUse&quot;,&quot;timeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;lambdaConfiguration&quot;:{&quot;scimEnterpriseUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimEnterpriseUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;lastUpdateInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;loginConfiguration&quot;:{&quot;requireAuthentication&quot;:&quot;\u003cboolean\u003e&quot;},&quot;logoutURL&quot;:&quot;\u003cstring\u003e&quot;,&quot;maximumPasswordAge&quot;:{&quot;days&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;minimumPasswordAge&quot;:{&quot;seconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;multiFactorConfiguration&quot;:{&quot;authenticator&quot;:{&quot;algorithm&quot;:&quot;HmacSHA512&quot;,&quot;codeLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timeStep&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;email&quot;:{&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;loginPolicy&quot;:&quot;Required&quot;,&quot;sms&quot;:{&quot;messengerId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;oauthConfiguration&quot;:{&quot;clientCredentialsAccessTokenPopulateLambdaId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;passwordEncryptionConfiguration&quot;:{&quot;encryptionScheme&quot;:&quot;\u003cstring\u003e&quot;,&quot;encryptionSchemeFactor&quot;:&quot;\u003cinteger\u003e&quot;,&quot;modifyEncryptionSchemeOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;passwordValidationRules&quot;:{&quot;breachDetection&quot;:{&quot;matchMode&quot;:&quot;Medium&quot;,&quot;notifyUserEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;onLogin&quot;:&quot;Off&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;maxLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;rememberPreviousPasswords&quot;:{&quot;count&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;requireMixedCase&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNonAlpha&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNumber&quot;:&quot;\u003cboolean\u003e&quot;,&quot;validateOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;rateLimitConfiguration&quot;:{&quot;failedLogin&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;forgotPassword&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendEmailVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendPasswordless&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendRegistrationVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendTwoFactor&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;registrationConfiguration&quot;:{},&quot;scimServerConfiguration&quot;:{&quot;clientEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;schemas&quot;:{&quot;magna_b&quot;:{},&quot;in_e&quot;:{},&quot;irure1f&quot;:{}},&quot;serverEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;ssoConfiguration&quot;:{&quot;deviceTrustTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;state&quot;:&quot;Active&quot;,&quot;themeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;userDeletePolicy&quot;:{&quot;unverified&quot;:{&quot;enabledInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;numberOfDaysToRetain&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;usernameConfiguration&quot;:{&quot;unique&quot;:{&quot;numberOfDigits&quot;:&quot;\u003cinteger\u003e&quot;,&quot;separator&quot;:&quot;\u003cstring\u003e&quot;,&quot;strategy&quot;:&quot;OnCollision&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;webAuthnConfiguration&quot;:{&quot;bootstrapWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;platform&quot;,&quot;userVerificationRequirement&quot;:&quot;discouraged&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;reauthenticationWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;platform&quot;,&quot;userVerificationRequirement&quot;:&quot;discouraged&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;relyingPartyId&quot;:&quot;\u003cstring\u003e&quot;,&quot;relyingPartyName&quot;:&quot;\u003cstring\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},{&quot;data&quot;:{&quot;inaa5&quot;:{},&quot;et_e&quot;:{}},&quot;accessControlConfiguration&quot;:{&quot;uiIPAccessControlListId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;captchaConfiguration&quot;:{&quot;captchaMethod&quot;:&quot;HCaptchaEnterprise&quot;,&quot;secretKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;siteKey&quot;:&quot;\u003cstring\u003e&quot;,&quot;threshold&quot;:&quot;\u003cdouble\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;configured&quot;:&quot;\u003cboolean\u003e&quot;,&quot;connectorPolicies&quot;:[{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;exercitation__&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;},{&quot;connectorId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;data&quot;:{&quot;animbe&quot;:{},&quot;non_e1&quot;:{}},&quot;migrate&quot;:&quot;\u003cboolean\u003e&quot;}],&quot;emailConfiguration&quot;:{&quot;additionalHeaders&quot;:[{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;},{&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;value&quot;:&quot;\u003cstring\u003e&quot;}],&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;defaultFromEmail&quot;:&quot;\u003cstring\u003e&quot;,&quot;defaultFromName&quot;:&quot;\u003cstring\u003e&quot;,&quot;emailUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;emailVerifiedEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;forgotPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;host&quot;:&quot;\u003cstring\u003e&quot;,&quot;implicitEmailVerificationAllowed&quot;:&quot;\u003cboolean\u003e&quot;,&quot;loginIdInUseOnCreateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginIdInUseOnUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginNewDeviceEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;loginSuspiciousEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;password&quot;:&quot;\u003cstring\u003e&quot;,&quot;passwordResetSuccessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordUpdateEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;passwordlessEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;port&quot;:&quot;\u003cinteger\u003e&quot;,&quot;properties&quot;:&quot;\u003cstring\u003e&quot;,&quot;security&quot;:&quot;TLS&quot;,&quot;setPasswordEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodAddEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;twoFactorMethodRemoveEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;unverified&quot;:{&quot;allowEmailChangeWhenGated&quot;:&quot;\u003cboolean\u003e&quot;,&quot;behavior&quot;:&quot;Gated&quot;},&quot;username&quot;:&quot;\u003cstring\u003e&quot;,&quot;verificationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;verificationStrategy&quot;:&quot;ClickableLink&quot;,&quot;verifyEmail&quot;:&quot;\u003cboolean\u003e&quot;,&quot;verifyEmailWhenChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;eventConfiguration&quot;:{&quot;events&quot;:{&quot;eiusmodcfa&quot;:{&quot;transactionType&quot;:&quot;SimpleMajority&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;ea8a&quot;:{&quot;transactionType&quot;:&quot;AbsoluteMajority&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;elite&quot;:{&quot;transactionType&quot;:&quot;AbsoluteMajority&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}}},&quot;externalIdentifierConfiguration&quot;:{&quot;authorizationGrantIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;changePasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;changePasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceCodeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;deviceUserCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;emailVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;emailVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;emailVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;externalAuthenticationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;oneTimePasswordTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;passwordlessLoginGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;passwordlessLoginTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;pendingAccountLinkTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlphaNumeric&quot;},&quot;registrationVerificationIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;registrationVerificationOneTimeCodeGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;rememberOAuthScopeConsentChoiceTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;samlv2AuthNRequestIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;setupPasswordIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomDigits&quot;},&quot;setupPasswordIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;trustTokenTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorOneTimeCodeIdGenerator&quot;:{&quot;length&quot;:&quot;\u003cinteger\u003e&quot;,&quot;type&quot;:&quot;randomAlpha&quot;},&quot;twoFactorOneTimeCodeIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;twoFactorTrustIdTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnAuthenticationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;webAuthnRegistrationChallengeTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;failedAuthenticationConfiguration&quot;:{&quot;actionCancelPolicy&quot;:{&quot;onPasswordReset&quot;:&quot;\u003cboolean\u003e&quot;},&quot;actionDuration&quot;:&quot;\u003clong\u003e&quot;,&quot;actionDurationUnit&quot;:&quot;YEARS&quot;,&quot;emailUser&quot;:&quot;\u003cboolean\u003e&quot;,&quot;resetCountInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;tooManyAttempts&quot;:&quot;\u003cinteger\u003e&quot;,&quot;userActionId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;familyConfiguration&quot;:{&quot;allowChildRegistrations&quot;:&quot;\u003cboolean\u003e&quot;,&quot;confirmChildEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;deleteOrphanedAccounts&quot;:&quot;\u003cboolean\u003e&quot;,&quot;deleteOrphanedAccountsDays&quot;:&quot;\u003cinteger\u003e&quot;,&quot;familyRequestEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;maximumChildAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minimumOwnerAge&quot;:&quot;\u003cinteger\u003e&quot;,&quot;parentEmailRequired&quot;:&quot;\u003cboolean\u003e&quot;,&quot;parentRegistrationEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;formConfiguration&quot;:{&quot;adminUserFormId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;httpSessionMaxInactiveInterval&quot;:&quot;\u003cinteger\u003e&quot;,&quot;id&quot;:&quot;\u003cuuid\u003e&quot;,&quot;insertInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;issuer&quot;:&quot;\u003cstring\u003e&quot;,&quot;jwtConfiguration&quot;:{&quot;accessTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;idTokenKeyId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;refreshTokenExpirationPolicy&quot;:&quot;SlidingWindow&quot;,&quot;refreshTokenRevocationPolicy&quot;:{&quot;onLoginPrevented&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onMultiFactorEnable&quot;:&quot;\u003cboolean\u003e&quot;,&quot;onPasswordChanged&quot;:&quot;\u003cboolean\u003e&quot;},&quot;refreshTokenSlidingWindowConfiguration&quot;:{&quot;maximumTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;},&quot;refreshTokenTimeToLiveInMinutes&quot;:&quot;\u003cinteger\u003e&quot;,&quot;refreshTokenUsagePolicy&quot;:&quot;Reusable&quot;,&quot;timeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;lambdaConfiguration&quot;:{&quot;scimEnterpriseUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimEnterpriseUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimGroupResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserRequestConverterId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;scimUserResponseConverterId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;lastUpdateInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;loginConfiguration&quot;:{&quot;requireAuthentication&quot;:&quot;\u003cboolean\u003e&quot;},&quot;logoutURL&quot;:&quot;\u003cstring\u003e&quot;,&quot;maximumPasswordAge&quot;:{&quot;days&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;minimumPasswordAge&quot;:{&quot;seconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;multiFactorConfiguration&quot;:{&quot;authenticator&quot;:{&quot;algorithm&quot;:&quot;HmacSHA1&quot;,&quot;codeLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timeStep&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;email&quot;:{&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;loginPolicy&quot;:&quot;Disabled&quot;,&quot;sms&quot;:{&quot;messengerId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;templateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;name&quot;:&quot;\u003cstring\u003e&quot;,&quot;oauthConfiguration&quot;:{&quot;clientCredentialsAccessTokenPopulateLambdaId&quot;:&quot;\u003cuuid\u003e&quot;},&quot;passwordEncryptionConfiguration&quot;:{&quot;encryptionScheme&quot;:&quot;\u003cstring\u003e&quot;,&quot;encryptionSchemeFactor&quot;:&quot;\u003cinteger\u003e&quot;,&quot;modifyEncryptionSchemeOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;passwordValidationRules&quot;:{&quot;breachDetection&quot;:{&quot;matchMode&quot;:&quot;High&quot;,&quot;notifyUserEmailTemplateId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;onLogin&quot;:&quot;Off&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;maxLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;minLength&quot;:&quot;\u003cinteger\u003e&quot;,&quot;rememberPreviousPasswords&quot;:{&quot;count&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;requireMixedCase&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNonAlpha&quot;:&quot;\u003cboolean\u003e&quot;,&quot;requireNumber&quot;:&quot;\u003cboolean\u003e&quot;,&quot;validateOnLogin&quot;:&quot;\u003cboolean\u003e&quot;},&quot;rateLimitConfiguration&quot;:{&quot;failedLogin&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;forgotPassword&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendEmailVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendPasswordless&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendRegistrationVerification&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;sendTwoFactor&quot;:{&quot;limit&quot;:&quot;\u003cinteger\u003e&quot;,&quot;timePeriodInSeconds&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;registrationConfiguration&quot;:{},&quot;scimServerConfiguration&quot;:{&quot;clientEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;schemas&quot;:{&quot;in4b&quot;:{},&quot;qui_a5&quot;:{}},&quot;serverEntityTypeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;ssoConfiguration&quot;:{&quot;deviceTrustTimeToLiveInSeconds&quot;:&quot;\u003cinteger\u003e&quot;},&quot;state&quot;:&quot;Inactive&quot;,&quot;themeId&quot;:&quot;\u003cuuid\u003e&quot;,&quot;userDeletePolicy&quot;:{&quot;unverified&quot;:{&quot;enabledInstant&quot;:&quot;\u003clong\u003e&quot;,&quot;numberOfDaysToRetain&quot;:&quot;\u003cinteger\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;usernameConfiguration&quot;:{&quot;unique&quot;:{&quot;numberOfDigits&quot;:&quot;\u003cinteger\u003e&quot;,&quot;separator&quot;:&quot;\u003cstring\u003e&quot;,&quot;strategy&quot;:&quot;OnCollision&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}},&quot;webAuthnConfiguration&quot;:{&quot;bootstrapWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;any&quot;,&quot;userVerificationRequirement&quot;:&quot;required&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;debug&quot;:&quot;\u003cboolean\u003e&quot;,&quot;reauthenticationWorkflow&quot;:{&quot;authenticatorAttachmentPreference&quot;:&quot;any&quot;,&quot;userVerificationRequirement&quot;:&quot;required&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;},&quot;relyingPartyId&quot;:&quot;\u003cstring\u003e&quot;,&quot;relyingPartyName&quot;:&quot;\u003cstring\u003e&quot;,&quot;enabled&quot;:&quot;\u003cboolean\u003e&quot;}}]}