Introduction Ask Anything

Retrieve IDCS Discovery Doc Retrieve OpenID Discovery Doc HTTP Options - OpenID Configuration HTTP Options - IDCS Configuration

Apps-Create-Create an application with a webtier policy

Step 1 - Create a confidential client app Step 2 - Update an application with a webtier policy

Create a confidential unmanaged client app

Deactivate application Regenerate client_secret Remove allowed scope from application

Update app - refreshTokenExpiry attribute Replace an app

Apps-Search-Search for Apps

Search an app for the WebTier Policy by app name Search an app for the WebTier Policy by appid Search for apps with filters using POST Search all apps that a specific user can access

Apps-Search-Search for Grants

List grants of a specific app

Apps-Client-Apps With the trustScope Attribute Value of Explicit

Search for an OAuth client app's explicit access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Tags

Step 1: Get allowed tags of client with trustscope:tags Step 2B: Search for an OAuth client app's tag-based access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Account

Search for a list of all OAuth resource apps that an OAuth client app has account-based access Search for an oauthclient app's account-based access to a particular oauth resource app

Apps-Client-Search for AppRoles Granted to a Client App

Search for all of a client's approles for a specific app Search for a distinct list of apps that a client can access using granted approles

Apps-Grants-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

AppRoles-Search

Search for approles that a user is a direct member Is a specific user a direct member of a specific approle?

AppRoles-Create

Create an approle

AppRoles-Modify

Update an AppRole Delete a custom approle

AppRoles-Grants-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

AppRoles-Grants

Search all grants of a specific approle to any group Grant an approle to an app

Audit Events-Search for App Events

Search all events for non-OPC SAML app access success

Audit Events-Search for Group Events

Search all events for successful group creation

Audit Events-Search for User Events-Successful Events

Search all events for user self-registration successes

Audit Events-Search for User Events-Failure Events

Search all events for user login failures

Audit Events-Search for User Events

Search all events for locked users

Audit Events-Search for Notification Events

Search all events for email notification delivery successes

Audit Events-Search for Email Verification Events

Search all events for successful primary email verifications

Audit Events-Search for ID Bridge Events

Search all events for ID Bridge sync successes

Search all events by a defined timeframe Search all audit events using POST

Bulk-Import & Export AppRoles

Schedule a job - import bulk AppRoles - generic Verify job success - AppRoles Review the job report Verify export job success - AppRoles Import a file to storage

Bulk-Import & Export Groups

Schedule a job - import bulk groups - generic Verify job success - groups Review the job report Verify export job success - groups Import a file to storage

Bulk-Import & Export Users

Schedule a job - import bulk users - generic Verify job success - users Review the job report Verify export job success - users Import a file to storage

Create users, groups, and apps in bulk Reset user's password in bulk (random value)Reset user's password in bulk (known value)Get a list of allowed csv column names

Grants-Apps-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

Grants-AppRoles-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grants-AppRoles

Search all grants of a specific approle to any group Grant an approle to an app

Grants-Groups-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

Grants-Users-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Grants-Users-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Create a group without members

Groups-Membership

Search for groups of which a specific user is a member Add group members List the members of a specific group that are users

Search all groups (with search criteria)Replace a group Update group (multiple attributes)

Search all groups (with search criteria)Get a specific group returning that group's memberships in approles defined by a specific app Search groups with filters using POST

Groups-Grants-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

MFA-Security Questions-Create

Create a security question

MFA-Security Questions-Delete

Delete a security question Delete a security question - System Generated ID

MFA-Security Questions-Search

Search all security questions (with filter of active questions)Search for a specific security question (return value)Search all security question settings Search for specific security question settings Search for a specific security question (return question text) - System Generated ID

MFA-Security Questions-Modify

Update a security question Replace security question settings Update security question settings

MFA-Bypass Codes-Create

Generate a bypass code for a user

MFA-Bypass Codes-Search

Search bypass codes using POST Search for a specific bypass code Search bypass codes

MFA-Bypass Codes-Delete

Delete a bypass code

MFA-Authentication Factor Settings-Search

Search authentication factor settings using POST Search for specific authentication factor settings Search authentication factor settings Search authentication factor settings using email attributes

MFA-Authentication Factor Settings-Modify

Replace authentication factor settings

MFA-Self Service-Enrolling in MFA Using the Email Factor

Step 1: Initiate Email Enrollment Step 2: Request OTP Through Email Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the SMS Factor

Step 1: Initiate SMS Enrollment Step 2: Request OTP by SMS Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the Security Questions Factor

Step 1: Enroll in Security Questions Step 2: Valdiate the Security Questions Enrollment Get the list of Security Questions Get the Security Questions Settings

MFA-Self Service-Security Questions Self Service

Validate my security questions and answers Retrieve my security questions

MFA-Self Service-Enrolling in MFA Using the Offline OTP Factor

Step 1: Initiate Offline OTP Enrollment Step 2: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the PUSH Factor

Step 1: Initiate PUSH Enrollment Step 2: Poll to Validate Back Channel Request

MFA-Self Service-Bypass Codes Self Service

Create Bypass Code Get a Bypass Code Search for Bypass Codes Search for Bypass Codes Using POST Delete a Bypass Code

MFA-Self Service-Devices Self Service

Search for devices Get a device Update my device Delete a device

MFA-Self Service-Trusted User Agents Self Service

Get my trusted user agents Get a trusted user agent Delete a trusted user agent

MFA-Self Service

Obtain ME access_token Get my information Change my default method Remove all of my authentication factors

Validate access_token (introspect)Obtain access_token and refresh token (resource owner)

OAuth-Configuration-Search

Search all OAuth configurations (get token timeouts)Search default OAuth configuration (OAuthConfig) (get token timeouts)Search for OAuth configs using POST

OAuth-Configuration-Modify

Replace OAuthConfig (token expiration) (DENIED)Update OAuthConfig (token expiration) (DENIED)

OAuth-Keys-Search

Search for Oracle Identity Cloud Service encryption keys (DENIED)Search for a Oracle Identity Cloud Service signing key (JWK)

Generate Access Token Using Auth API

Step 1: Authentication Request with AppName Step 2: UserName/Password Submission Step 3: Generate Access Token Step 4: Obtain User Information

Policy-Condition Group Templates-Search

List all condition group templates Get a specific condition group template Search for condition group templates via POST

Policy-Condition Groups-Create

Create a condition group for a specific provider risk level

Policy-Condition Groups-Search

List all condition groups Get a specific condition group Search for condition groups via POST Get a list of allowed methods

Policy-Condition Groups-Modify

Replace a condition group Update a condition group

Policy-Condition Groups-Delete

Delete a condition group

Policy-Condition Templates-Search

List all condition templates Get a specific condition template Search for condition templates via POST Get a list of allowed methods

Policy-Conditions-Create

Create a condition - provider risk level equals a certain value

Policy-Conditions-Search

List all conditions Get a specific condition Search for conditions via POST Get a list of allowed methods

Policy-Conditions-Modify

Replace a condition Update a condition

Policy-Conditions-Delete

Delete a condition

Policy-Network Perimeter

Create a Network Perimeter IPV6 Address Get a Network Perimeter Search a Network Perimeter for an IP Adress Version Filter Search a Network Perimeter for an IP Adress Name Filter Search NetworkPerimeters Using Post Update a Network Perimeter (Add, Replace and Remove an IP Address)

Policy-Policies-Create

Create a sign-in policy

Policy-Policies-Search

Get a specific policy List all policies Search for policies via POST Get a list of allowed methods

Policy-Policies-Modify

Update a policy

Policy-Policies-Delete

Delete a specific policy

Policy-Policy Templates-Search

Get a specific Policy Template List all policy templates Search a policy templates via POST Get a list of allowed methods

Policy-Policy Types-Search

Get a specific policy type List all policy types Search for policy types via POST Get a list of allowed methods

Policy-Rule Templates-Search

Get a specific rule template List all rule templates

Policy-Rules-Create

Policy-Rules-Search

Get a specific rule List all rules Search for rules via POST Get a list of allowed methods

Policy-Rules-Modify

Update a specific rule

Policy-Rules-Delete

Delete a specific rule

Reports-PDF and CSV

Generate unsuccessful login attempts report (PDF)Download report/diagnostic files

Get multiple reports (count)

SAML-Service Provider-Search

Search all service providers

SAML-Service Provider-Create

Create a service provider

SAML-Identity Provider-Search

Search all identity providers (return specific attributes)Search for a specific identity provider (return specific attributes)

SAML-Identity Provider-Modify

Disable identity provider

Self Service-Update Account Information

Replace Me Update Me (multiple attributes)

Self Service-Change Password

Self-service password change

Self Service-Email Verification

Step 1: User makes a change to their info Step 2: User initiates self-service email verification Step 3: Obtain user token Step 4: Self-verify email address

Self Service-Password Reset

Step 1: Retrieve password recovery options to get masked email value Step 2: Self-service password reset requestor Step 3: Obtain user token Step 4: Self-service password reset

Self Service-Favorite or Unfavorite an App

Step 1: My apps Step 2: Favorite or unfavorite an app

Get my information Retrieve password recovery options Retrieve my accesses Retrieve my apps

Search all users (with search criteria)List the apps that a specific user has access to Search for users via POST

Check user password Validate password against password policy Validate password against password policy (specific user)Generate a password (suggestion for specific user)Reset user's password (random value)Reset user's password (known value)

Replace a user Update user (multiple attributes)

Users-Lifecycle

Assert user Start user activation (invite user)Deactivate user

Create a user Generate a unique username

Users-Membership

List all of a user's granted approles Search all users who are members of a specific group

Users-Grants-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Users-Grants-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Terms of Use (TOU)-Terms of Uses (TOU)-Create

Create a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)-Delete

Terms of Use (TOU)-Terms of Uses (TOU)-Search

Get a TOU List all TOUs Search for TOUs via POST

Terms of Use (TOU)-Terms of Uses (TOU)-Modify

Replace a TOU Update a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)

Add a TOU statement to a TOU using POST /Bulk

Terms of Use (TOU)-Terms of Use (TOU) Statements-Create

Create a TOU statement and assign to multiple TOUs

Terms of Use (TOU)-Terms of Use (TOU) Statements-Delete

Delete a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements-Search

Get a TOU statement Search for TOU statements associated with a TOU Search TOU statements using POST

Terms of Use (TOU)-Terms of Use (TOU) Statements-Modify

Replace a TOU statement Update a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements

Search for Supported Locales

IDCS APIs (OCI Identity Domains)

Retrieve IDCS Discovery Doc Retrieve OpenID Discovery Doc HTTP Options - OpenID Configuration HTTP Options - IDCS Configuration

Apps-Create-Create an application with a webtier policy

Step 1 - Create a confidential client app Step 2 - Update an application with a webtier policy

Create a confidential unmanaged client app

Deactivate application Regenerate client_secret Remove allowed scope from application

Update app - refreshTokenExpiry attribute Replace an app

Apps-Search-Search for Apps

Search an app for the WebTier Policy by app name Search an app for the WebTier Policy by appid Search for apps with filters using POST Search all apps that a specific user can access

Apps-Search-Search for Grants

List grants of a specific app

Apps-Client-Apps With the trustScope Attribute Value of Explicit

Search for an OAuth client app's explicit access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Tags

Step 1: Get allowed tags of client with trustscope:tags Step 2B: Search for an OAuth client app's tag-based access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Account

Search for a list of all OAuth resource apps that an OAuth client app has account-based access Search for an oauthclient app's account-based access to a particular oauth resource app

Apps-Client-Search for AppRoles Granted to a Client App

Search for all of a client's approles for a specific app Search for a distinct list of apps that a client can access using granted approles

Apps-Grants-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

AppRoles-Search

Search for approles that a user is a direct member Is a specific user a direct member of a specific approle?

AppRoles-Create

Create an approle

AppRoles-Modify

Update an AppRole Delete a custom approle

AppRoles-Grants-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

AppRoles-Grants

Search all grants of a specific approle to any group Grant an approle to an app

Audit Events-Search for App Events

Search all events for non-OPC SAML app access success

Audit Events-Search for Group Events

Search all events for successful group creation

Audit Events-Search for User Events-Successful Events

Search all events for user self-registration successes

Audit Events-Search for User Events-Failure Events

Search all events for user login failures

Audit Events-Search for User Events

Search all events for locked users

Audit Events-Search for Notification Events

Search all events for email notification delivery successes

Audit Events-Search for Email Verification Events

Search all events for successful primary email verifications

Audit Events-Search for ID Bridge Events

Search all events for ID Bridge sync successes

Search all events by a defined timeframe Search all audit events using POST

Bulk-Import & Export AppRoles

Schedule a job - import bulk AppRoles - generic Verify job success - AppRoles Review the job report Verify export job success - AppRoles Import a file to storage

Bulk-Import & Export Groups

Schedule a job - import bulk groups - generic Verify job success - groups Review the job report Verify export job success - groups Import a file to storage

Bulk-Import & Export Users

Schedule a job - import bulk users - generic Verify job success - users Review the job report Verify export job success - users Import a file to storage

Create users, groups, and apps in bulk Reset user's password in bulk (random value)Reset user's password in bulk (known value)Get a list of allowed csv column names

Dynamic Resource Groups-Create

Create a dynamic group

Dynamic Resource Groups-Delete

Delete dynamic group

Dynamic Resource Groups-Modify

Search all dynamic groups (with search criteria)Replace a dynamic group Update dynamic group (replace multiple attributes)

Dynamic Resource Groups-Search

Search all dynamic groups (with search criteria)Get a specific dynamic group (returning all default attributes)Search dynamic groups with filters using POST

Grants-Apps-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

Grants-AppRoles-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grants-AppRoles

Search all grants of a specific approle to any group Grant an approle to an app

Grants-Groups-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

Grants-Users-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Grants-Users-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Create a group without members

Groups-Membership

Search for groups of which a specific user is a member Add group members List the members of a specific group that are users

Search all groups (with search criteria)Replace a group Update group (multiple attributes)

Search all groups (with search criteria)Get a specific group returning that group's memberships in approles defined by a specific app Search groups with filters using POST

Groups-Grants-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

MFA-Security Questions-Create

Create a security question

MFA-Security Questions-Delete

Delete a security question Delete a security question - System Generated ID

MFA-Security Questions-Search

Search all security questions (with filter of active questions)Search for a specific security question (return value)Search all security question settings Search for specific security question settings Search for a specific security question (return question text) - System Generated ID

MFA-Security Questions-Modify

Update a security question Replace security question settings Update security question settings

MFA-Bypass Codes-Create

Generate a bypass code for a user

MFA-Bypass Codes-Search

Search bypass codes using POST Search for a specific bypass code Search bypass codes

MFA-Bypass Codes-Delete

Delete a bypass code

MFA-Authentication Factor Settings-Search

Search authentication factor settings using POST Search for specific authentication factor settings Search authentication factor settings Search authentication factor settings using email attributes

MFA-Authentication Factor Settings-Modify

Replace authentication factor settings

MFA-Self Service-Enrolling in MFA Using the Email Factor

Step 1: Initiate Email Enrollment Step 2: Request OTP Through Email Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the SMS Factor

Step 1: Initiate SMS Enrollment Step 2: Request OTP by SMS Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the Security Questions Factor

Step 1: Enroll in Security Questions Step 2: Valdiate the Security Questions Enrollment Get the list of Security Questions Get the Security Questions Settings

MFA-Self Service-Security Questions Self Service

Validate my security questions and answers Retrieve my security questions

MFA-Self Service-Enrolling in MFA Using the Offline OTP Factor

Step 1: Initiate Offline OTP Enrollment Step 2: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the PUSH Factor

Step 1: Initiate PUSH Enrollment Step 2: Poll to Validate Back Channel Request

MFA-Self Service-Bypass Codes Self Service

Create Bypass Code Get a Bypass Code Search for Bypass Codes Search for Bypass Codes Using POST Delete a Bypass Code

MFA-Self Service-Devices Self Service

Search for devices Get a device Update my device Delete a device

MFA-Self Service-Trusted User Agents Self Service

Get my trusted user agents Get a trusted user agent Delete a trusted user agent

MFA-Self Service

Obtain ME access_token Get my information Change my default method Remove all of my authentication factors

Validate access_token (introspect)Obtain access_token and refresh token (resource owner)

OAuth-Configuration-Search

Search all OAuth configurations (get token timeouts)Search default OAuth configuration (OAuthConfig) (get token timeouts)Search for OAuth configs using POST

OAuth-Configuration-Modify

Replace OAuthConfig (token expiration) (DENIED)Update OAuthConfig (token expiration) (DENIED)

OAuth-Keys-Search

Search for Oracle Identity Cloud Service encryption keys (DENIED)Search for a Oracle Identity Cloud Service signing key (JWK)

Generate Access Token Using Auth API

Step 1: Authentication Request with AppName Step 2: UserName/Password Submission Step 3: Generate Access Token Step 4: Obtain User Information

Policy-Condition Group Templates-Search

List all condition group templates Get a specific condition group template Search for condition group templates via POST

Policy-Condition Groups-Create

Create a condition group for a specific provider risk level

Policy-Condition Groups-Search

List all condition groups Get a specific condition group Search for condition groups via POST Get a list of allowed methods

Policy-Condition Groups-Modify

Replace a condition group Update a condition group

Policy-Condition Groups-Delete

Delete a condition group

Policy-Condition Templates-Search

List all condition templates Get a specific condition template Search for condition templates via POST Get a list of allowed methods

Policy-Conditions-Create

Create a condition - provider risk level equals a certain value

Policy-Conditions-Search

List all conditions Get a specific condition Search for conditions via POST Get a list of allowed methods

Policy-Conditions-Modify

Replace a condition Update a condition

Policy-Conditions-Delete

Delete a condition

Policy-Network Perimeter

Create a Network Perimeter IPV6 Address Get a Network Perimeter Search a Network Perimeter for an IP Adress Version Filter Search a Network Perimeter for an IP Adress Name Filter Search NetworkPerimeters Using Post Update a Network Perimeter (Add, Replace and Remove an IP Address)

Policy-Policies-Create

Create a sign-in policy

Policy-Policies-Search

Get a specific policy List all policies Search for policies via POST Get a list of allowed methods

Policy-Policies-Modify

Update a policy

Policy-Policies-Delete

Delete a specific policy

Policy-Policy Templates-Search

Get a specific Policy Template List all policy templates Search a policy templates via POST Get a list of allowed methods

Policy-Policy Types-Search

Get a specific policy type List all policy types Search for policy types via POST Get a list of allowed methods

Policy-Rule Templates-Search

Get a specific rule template List all rule templates

Policy-Rules-Create

Policy-Rules-Search

Get a specific rule List all rules Search for rules via POST Get a list of allowed methods

Policy-Rules-Modify

Update a specific rule

Policy-Rules-Delete

Delete a specific rule

Reports-PDF and CSV

Generate unsuccessful login attempts report (PDF)Download report/diagnostic files

Get multiple reports (count)

SAML-Service Provider-Search

Search all service providers

SAML-Service Provider-Create

Create a service provider

SAML-Identity Provider-Search

Search all identity providers (return specific attributes)Search for a specific identity provider (return specific attributes)

SAML-Identity Provider-Modify

Disable identity provider

Self Service-Update Account Information

Replace Me Update Me (multiple attributes)

Self Service-Change Password

Self-service password change

Self Service-Email Verification

Step 1: User makes a change to their info Step 2: User initiates self-service email verification Step 3: Obtain user token Step 4: Self-verify email address

Self Service-Password Reset

Step 1: Retrieve password recovery options to get masked email value Step 2: Self-service password reset requestor Step 3: Obtain user token Step 4: Self-service password reset

Self Service-Favorite or Unfavorite an App

Step 1: My apps Step 2: Favorite or unfavorite an app

Get my groups Retrieve password recovery options Retrieve my accesses Retrieve my apps

Search all users (with search criteria)List the apps that a specific user has access to Search for users via POST

Check user password Validate password against password policy Validate password against password policy (specific user)Generate a password (suggestion for specific user)Reset user's password (random value)Reset user's password (known value)

Replace a user Update user (multiple attributes)

Users-Lifecycle

Assert user Start user activation (invite user)Deactivate user

Create a user Generate a unique username

Users-Membership

List all of a user's granted approles Search all users who are members of a specific group

Users-Grants-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Users-Grants-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Terms of Use (TOU)-Terms of Uses (TOU)-Create

Create a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)-Delete

Terms of Use (TOU)-Terms of Uses (TOU)-Search

Get a TOU List all TOUs Search for TOUs via POST

Terms of Use (TOU)-Terms of Uses (TOU)-Modify

Replace a TOU Update a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)

Add a TOU statement to a TOU using POST /Bulk

Terms of Use (TOU)-Terms of Use (TOU) Statements-Create

Create a TOU statement and assign to multiple TOUs

Terms of Use (TOU)-Terms of Use (TOU) Statements-Delete

Delete a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements-Search

Get a TOU statement Search for TOU statements associated with a TOU Search TOU statements using POST

Terms of Use (TOU)-Terms of Use (TOU) Statements-Modify

Replace a TOU statement Update a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements

Search for Supported Locales

IDCS Authn (Username Approve Notification) In Mobile App

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Repeat this Poll Request Repeatedly Until Success.Access IDCS API

IDCS Authn (Username Email) OTP

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Email OTP Access IDCS API

IDCS Authn (Username Password Login Using Backup) SMS

Get access token using ID Token Initiate - Authn API Authentication Request Submit - SMS OTP Code to complete Login and Make SMS As default Access IDCS API

IDCS Authn (Username Password)

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Password Access IDCS API

IDCS Authn (Username SMS MFA) Push Notification

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Repeat this Poll Request Repeatedly Until Success.Access IDCS API

IDCS Authn (Username SMS) OTP

Get access token using ID Token Initiate - Authn API Authentication Request Submit - SMS OTP Access IDCS API

IDCS Authn (Username TOTP) Code From Mobile App

Get access token using ID Token Initiate - Authn API Authentication Request Submit - TOTP Code generated on Mobile App Access IDCS API

IDCS RADIUS Proxy

RADIUS Proxy-Create

Create a RADIUS Proxy

RADIUS Proxy-Delete

Delete a RADIUS Proxy

RADIUS Proxy-Lifecycle

Deactivate a RADIUS Proxy

RADIUS Proxy-Modify

Modify a RADIUS Proxy Replace a RADIUS Proxy

RADIUS Proxy-Search

Obtain listeners and mappings info Get a specific RADIUS Proxy Search RADIUS Proxies via POST Get client ID and client secret of App corresponding to RADIUS Proxy

RADIUS Proxy-RADIUS Proxy Listeners-Create

Create a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Delete

Delete a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Modify

Update a RADIUS Proxy Listener Replace a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Search

List all RADIUS Proxy Listeners Get a specific RADIUS Proxy Listener Search RADIUS Proxy Listeners via POST

RADIUS Proxy-RADIUS Proxy Mappings-Create

Create a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Delete

Delete a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Modify

Update a RADIUS Proxy Mapping Replace a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Search

List all RADIUS Proxy Mappings (specific attributes)Get a specific RADIUS Proxy Mapping Search RADIUS Proxy Mappings via POST

RADIUS Proxy-RADIUS App-Create

Create RADIUS App

RADIUS Proxy-RADIUS App-Modify

Update RADIUS App (IP Address in CIDR format)

RADIUS Proxy-RADIUS App-Delete

Delete RADIUS App

RADIUS Proxy-RADIUS App-Search

Search all apps (with search criteria)

RADIUS Proxy-OAuth Token

Obtain access_token (client credentials)

Introduction Ask Anything

Retrieve IDCS Discovery Doc Retrieve OpenID Discovery Doc HTTP Options - OpenID Configuration HTTP Options - IDCS Configuration

Apps-Create-Create an application with a webtier policy

Step 1 - Create a confidential client app Step 2 - Update an application with a webtier policy

Create a confidential unmanaged client app

Deactivate application Regenerate client_secret Remove allowed scope from application

Update app - refreshTokenExpiry attribute Replace an app

Apps-Search-Search for Apps

Search an app for the WebTier Policy by app name Search an app for the WebTier Policy by appid Search for apps with filters using POST Search all apps that a specific user can access

Apps-Search-Search for Grants

List grants of a specific app

Apps-Client-Apps With the trustScope Attribute Value of Explicit

Search for an OAuth client app's explicit access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Tags

Step 1: Get allowed tags of client with trustscope:tags Step 2B: Search for an OAuth client app's tag-based access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Account

Search for a list of all OAuth resource apps that an OAuth client app has account-based access Search for an oauthclient app's account-based access to a particular oauth resource app

Apps-Client-Search for AppRoles Granted to a Client App

Search for all of a client's approles for a specific app Search for a distinct list of apps that a client can access using granted approles

Apps-Grants-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

AppRoles-Search

Search for approles that a user is a direct member Is a specific user a direct member of a specific approle?

AppRoles-Create

Create an approle

AppRoles-Modify

Update an AppRole Delete a custom approle

AppRoles-Grants-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

AppRoles-Grants

Search all grants of a specific approle to any group Grant an approle to an app

Audit Events-Search for App Events

Search all events for non-OPC SAML app access success

Audit Events-Search for Group Events

Search all events for successful group creation

Audit Events-Search for User Events-Successful Events

Search all events for user self-registration successes

Audit Events-Search for User Events-Failure Events

Search all events for user login failures

Audit Events-Search for User Events

Search all events for locked users

Audit Events-Search for Notification Events

Search all events for email notification delivery successes

Audit Events-Search for Email Verification Events

Search all events for successful primary email verifications

Audit Events-Search for ID Bridge Events

Search all events for ID Bridge sync successes

Search all events by a defined timeframe Search all audit events using POST

Bulk-Import & Export AppRoles

Schedule a job - import bulk AppRoles - generic Verify job success - AppRoles Review the job report Verify export job success - AppRoles Import a file to storage

Bulk-Import & Export Groups

Schedule a job - import bulk groups - generic Verify job success - groups Review the job report Verify export job success - groups Import a file to storage

Bulk-Import & Export Users

Schedule a job - import bulk users - generic Verify job success - users Review the job report Verify export job success - users Import a file to storage

Create users, groups, and apps in bulk Reset user's password in bulk (random value)Reset user's password in bulk (known value)Get a list of allowed csv column names

Grants-Apps-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

Grants-AppRoles-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grants-AppRoles

Search all grants of a specific approle to any group Grant an approle to an app

Grants-Groups-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

Grants-Users-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Grants-Users-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Create a group without members

Groups-Membership

Search for groups of which a specific user is a member Add group members List the members of a specific group that are users

Search all groups (with search criteria)Replace a group Update group (multiple attributes)

Search all groups (with search criteria)Get a specific group returning that group's memberships in approles defined by a specific app Search groups with filters using POST

Groups-Grants-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

MFA-Security Questions-Create

Create a security question

MFA-Security Questions-Delete

Delete a security question Delete a security question - System Generated ID

MFA-Security Questions-Search

Search all security questions (with filter of active questions)Search for a specific security question (return value)Search all security question settings Search for specific security question settings Search for a specific security question (return question text) - System Generated ID

MFA-Security Questions-Modify

Update a security question Replace security question settings Update security question settings

MFA-Bypass Codes-Create

Generate a bypass code for a user

MFA-Bypass Codes-Search

Search bypass codes using POST Search for a specific bypass code Search bypass codes

MFA-Bypass Codes-Delete

Delete a bypass code

MFA-Authentication Factor Settings-Search

Search authentication factor settings using POST Search for specific authentication factor settings Search authentication factor settings Search authentication factor settings using email attributes

MFA-Authentication Factor Settings-Modify

Replace authentication factor settings

MFA-Self Service-Enrolling in MFA Using the Email Factor

Step 1: Initiate Email Enrollment Step 2: Request OTP Through Email Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the SMS Factor

Step 1: Initiate SMS Enrollment Step 2: Request OTP by SMS Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the Security Questions Factor

Step 1: Enroll in Security Questions Step 2: Valdiate the Security Questions Enrollment Get the list of Security Questions Get the Security Questions Settings

MFA-Self Service-Security Questions Self Service

Validate my security questions and answers Retrieve my security questions

MFA-Self Service-Enrolling in MFA Using the Offline OTP Factor

Step 1: Initiate Offline OTP Enrollment Step 2: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the PUSH Factor

Step 1: Initiate PUSH Enrollment Step 2: Poll to Validate Back Channel Request

MFA-Self Service-Bypass Codes Self Service

Create Bypass Code Get a Bypass Code Search for Bypass Codes Search for Bypass Codes Using POST Delete a Bypass Code

MFA-Self Service-Devices Self Service

Search for devices Get a device Update my device Delete a device

MFA-Self Service-Trusted User Agents Self Service

Get my trusted user agents Get a trusted user agent Delete a trusted user agent

MFA-Self Service

Obtain ME access_token Get my information Change my default method Remove all of my authentication factors

Validate access_token (introspect)Obtain access_token and refresh token (resource owner)

OAuth-Configuration-Search

Search all OAuth configurations (get token timeouts)Search default OAuth configuration (OAuthConfig) (get token timeouts)Search for OAuth configs using POST

OAuth-Configuration-Modify

Replace OAuthConfig (token expiration) (DENIED)Update OAuthConfig (token expiration) (DENIED)

OAuth-Keys-Search

Search for Oracle Identity Cloud Service encryption keys (DENIED)Search for a Oracle Identity Cloud Service signing key (JWK)

Generate Access Token Using Auth API

Step 1: Authentication Request with AppName Step 2: UserName/Password Submission Step 3: Generate Access Token Step 4: Obtain User Information

Policy-Condition Group Templates-Search

List all condition group templates Get a specific condition group template Search for condition group templates via POST

Policy-Condition Groups-Create

Create a condition group for a specific provider risk level

Policy-Condition Groups-Search

List all condition groups Get a specific condition group Search for condition groups via POST Get a list of allowed methods

Policy-Condition Groups-Modify

Replace a condition group Update a condition group

Policy-Condition Groups-Delete

Delete a condition group

Policy-Condition Templates-Search

List all condition templates Get a specific condition template Search for condition templates via POST Get a list of allowed methods

Policy-Conditions-Create

Create a condition - provider risk level equals a certain value

Policy-Conditions-Search

List all conditions Get a specific condition Search for conditions via POST Get a list of allowed methods

Policy-Conditions-Modify

Replace a condition Update a condition

Policy-Conditions-Delete

Delete a condition

Policy-Network Perimeter

Create a Network Perimeter IPV6 Address Get a Network Perimeter Search a Network Perimeter for an IP Adress Version Filter Search a Network Perimeter for an IP Adress Name Filter Search NetworkPerimeters Using Post Update a Network Perimeter (Add, Replace and Remove an IP Address)

Policy-Policies-Create

Create a sign-in policy

Policy-Policies-Search

Get a specific policy List all policies Search for policies via POST Get a list of allowed methods

Policy-Policies-Modify

Update a policy

Policy-Policies-Delete

Delete a specific policy

Policy-Policy Templates-Search

Get a specific Policy Template List all policy templates Search a policy templates via POST Get a list of allowed methods

Policy-Policy Types-Search

Get a specific policy type List all policy types Search for policy types via POST Get a list of allowed methods

Policy-Rule Templates-Search

Get a specific rule template List all rule templates

Policy-Rules-Create

Policy-Rules-Search

Get a specific rule List all rules Search for rules via POST Get a list of allowed methods

Policy-Rules-Modify

Update a specific rule

Policy-Rules-Delete

Delete a specific rule

Reports-PDF and CSV

Generate unsuccessful login attempts report (PDF)Download report/diagnostic files

Get multiple reports (count)

SAML-Service Provider-Search

Search all service providers

SAML-Service Provider-Create

Create a service provider

SAML-Identity Provider-Search

Search all identity providers (return specific attributes)Search for a specific identity provider (return specific attributes)

SAML-Identity Provider-Modify

Disable identity provider

Self Service-Update Account Information

Replace Me Update Me (multiple attributes)

Self Service-Change Password

Self-service password change

Self Service-Email Verification

Step 1: User makes a change to their info Step 2: User initiates self-service email verification Step 3: Obtain user token Step 4: Self-verify email address

Self Service-Password Reset

Step 1: Retrieve password recovery options to get masked email value Step 2: Self-service password reset requestor Step 3: Obtain user token Step 4: Self-service password reset

Self Service-Favorite or Unfavorite an App

Step 1: My apps Step 2: Favorite or unfavorite an app

Get my information Retrieve password recovery options Retrieve my accesses Retrieve my apps

Search all users (with search criteria)List the apps that a specific user has access to Search for users via POST

Check user password Validate password against password policy Validate password against password policy (specific user)Generate a password (suggestion for specific user)Reset user's password (random value)Reset user's password (known value)

Replace a user Update user (multiple attributes)

Users-Lifecycle

Assert user Start user activation (invite user)Deactivate user

Create a user Generate a unique username

Users-Membership

List all of a user's granted approles Search all users who are members of a specific group

Users-Grants-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Users-Grants-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Terms of Use (TOU)-Terms of Uses (TOU)-Create

Create a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)-Delete

Terms of Use (TOU)-Terms of Uses (TOU)-Search

Get a TOU List all TOUs Search for TOUs via POST

Terms of Use (TOU)-Terms of Uses (TOU)-Modify

Replace a TOU Update a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)

Add a TOU statement to a TOU using POST /Bulk

Terms of Use (TOU)-Terms of Use (TOU) Statements-Create

Create a TOU statement and assign to multiple TOUs

Terms of Use (TOU)-Terms of Use (TOU) Statements-Delete

Delete a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements-Search

Get a TOU statement Search for TOU statements associated with a TOU Search TOU statements using POST

Terms of Use (TOU)-Terms of Use (TOU) Statements-Modify

Replace a TOU statement Update a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements

Search for Supported Locales

IDCS APIs (OCI Identity Domains)

Retrieve IDCS Discovery Doc Retrieve OpenID Discovery Doc HTTP Options - OpenID Configuration HTTP Options - IDCS Configuration

Apps-Create-Create an application with a webtier policy

Step 1 - Create a confidential client app Step 2 - Update an application with a webtier policy

Create a confidential unmanaged client app

Deactivate application Regenerate client_secret Remove allowed scope from application

Update app - refreshTokenExpiry attribute Replace an app

Apps-Search-Search for Apps

Search an app for the WebTier Policy by app name Search an app for the WebTier Policy by appid Search for apps with filters using POST Search all apps that a specific user can access

Apps-Search-Search for Grants

List grants of a specific app

Apps-Client-Apps With the trustScope Attribute Value of Explicit

Search for an OAuth client app's explicit access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Tags

Step 1: Get allowed tags of client with trustscope:tags Step 2B: Search for an OAuth client app's tag-based access to a specific OAuth resource app

Apps-Client-Apps With the trustScope Attribute Value of Account

Search for a list of all OAuth resource apps that an OAuth client app has account-based access Search for an oauthclient app's account-based access to a particular oauth resource app

Apps-Client-Search for AppRoles Granted to a Client App

Search for all of a client's approles for a specific app Search for a distinct list of apps that a client can access using granted approles

Apps-Grants-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

AppRoles-Search

Search for approles that a user is a direct member Is a specific user a direct member of a specific approle?

AppRoles-Create

Create an approle

AppRoles-Modify

Update an AppRole Delete a custom approle

AppRoles-Grants-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

AppRoles-Grants

Search all grants of a specific approle to any group Grant an approle to an app

Audit Events-Search for App Events

Search all events for non-OPC SAML app access success

Audit Events-Search for Group Events

Search all events for successful group creation

Audit Events-Search for User Events-Successful Events

Search all events for user self-registration successes

Audit Events-Search for User Events-Failure Events

Search all events for user login failures

Audit Events-Search for User Events

Search all events for locked users

Audit Events-Search for Notification Events

Search all events for email notification delivery successes

Audit Events-Search for Email Verification Events

Search all events for successful primary email verifications

Audit Events-Search for ID Bridge Events

Search all events for ID Bridge sync successes

Search all events by a defined timeframe Search all audit events using POST

Bulk-Import & Export AppRoles

Schedule a job - import bulk AppRoles - generic Verify job success - AppRoles Review the job report Verify export job success - AppRoles Import a file to storage

Bulk-Import & Export Groups

Schedule a job - import bulk groups - generic Verify job success - groups Review the job report Verify export job success - groups Import a file to storage

Bulk-Import & Export Users

Schedule a job - import bulk users - generic Verify job success - users Review the job report Verify export job success - users Import a file to storage

Create users, groups, and apps in bulk Reset user's password in bulk (random value)Reset user's password in bulk (known value)Get a list of allowed csv column names

Dynamic Resource Groups-Create

Create a dynamic group

Dynamic Resource Groups-Delete

Delete dynamic group

Dynamic Resource Groups-Modify

Search all dynamic groups (with search criteria)Replace a dynamic group Update dynamic group (replace multiple attributes)

Dynamic Resource Groups-Search

Search all dynamic groups (with search criteria)Get a specific dynamic group (returning all default attributes)Search dynamic groups with filters using POST

Grants-Apps-Revoke an AppRole from a client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grant an approle to an app Search for all grants to a specific client app

Grants-AppRoles-Revoke an AppRole from a Client

Step 1: Get all grants of the specified approle to the client Step 2: Delete each grant

Grants-AppRoles

Search all grants of a specific approle to any group Grant an approle to an app

Grants-Groups-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Grants-Groups-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

Grants-Users-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Grants-Users-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Create a group without members

Groups-Membership

Search for groups of which a specific user is a member Add group members List the members of a specific group that are users

Search all groups (with search criteria)Replace a group Update group (multiple attributes)

Search all groups (with search criteria)Get a specific group returning that group's memberships in approles defined by a specific app Search groups with filters using POST

Groups-Grants-Revoke an AppRole from a Group

Step 1: Get all grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke an Unmanaged App from a Group

Step 1: Get the grants of the approle to this group Step 2: Delete each grant

Groups-Grants-Revoke a Managed App from a Group

Step 1: Get grants for a group for a specific app Step 2: Delete each grant

Grant an unmanaged app to a group Search for a specific group's grants of a specific app and any associated approles Get a specific group returning the distinct set of apps granted to the group Search for all groups that have grants of a specific app

MFA-Security Questions-Create

Create a security question

MFA-Security Questions-Delete

Delete a security question Delete a security question - System Generated ID

MFA-Security Questions-Search

Search all security questions (with filter of active questions)Search for a specific security question (return value)Search all security question settings Search for specific security question settings Search for a specific security question (return question text) - System Generated ID

MFA-Security Questions-Modify

Update a security question Replace security question settings Update security question settings

MFA-Bypass Codes-Create

Generate a bypass code for a user

MFA-Bypass Codes-Search

Search bypass codes using POST Search for a specific bypass code Search bypass codes

MFA-Bypass Codes-Delete

Delete a bypass code

MFA-Authentication Factor Settings-Search

Search authentication factor settings using POST Search for specific authentication factor settings Search authentication factor settings Search authentication factor settings using email attributes

MFA-Authentication Factor Settings-Modify

Replace authentication factor settings

MFA-Self Service-Enrolling in MFA Using the Email Factor

Step 1: Initiate Email Enrollment Step 2: Request OTP Through Email Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the SMS Factor

Step 1: Initiate SMS Enrollment Step 2: Request OTP by SMS Step 3: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the Security Questions Factor

Step 1: Enroll in Security Questions Step 2: Valdiate the Security Questions Enrollment Get the list of Security Questions Get the Security Questions Settings

MFA-Self Service-Security Questions Self Service

Validate my security questions and answers Retrieve my security questions

MFA-Self Service-Enrolling in MFA Using the Offline OTP Factor

Step 1: Initiate Offline OTP Enrollment Step 2: Valdiate the OTP

MFA-Self Service-Enrolling in MFA Using the PUSH Factor

Step 1: Initiate PUSH Enrollment Step 2: Poll to Validate Back Channel Request

MFA-Self Service-Bypass Codes Self Service

Create Bypass Code Get a Bypass Code Search for Bypass Codes Search for Bypass Codes Using POST Delete a Bypass Code

MFA-Self Service-Devices Self Service

Search for devices Get a device Update my device Delete a device

MFA-Self Service-Trusted User Agents Self Service

Get my trusted user agents Get a trusted user agent Delete a trusted user agent

MFA-Self Service

Obtain ME access_token Get my information Change my default method Remove all of my authentication factors

Validate access_token (introspect)Obtain access_token and refresh token (resource owner)

OAuth-Configuration-Search

Search all OAuth configurations (get token timeouts)Search default OAuth configuration (OAuthConfig) (get token timeouts)Search for OAuth configs using POST

OAuth-Configuration-Modify

Replace OAuthConfig (token expiration) (DENIED)Update OAuthConfig (token expiration) (DENIED)

OAuth-Keys-Search

Search for Oracle Identity Cloud Service encryption keys (DENIED)Search for a Oracle Identity Cloud Service signing key (JWK)

Generate Access Token Using Auth API

Step 1: Authentication Request with AppName Step 2: UserName/Password Submission Step 3: Generate Access Token Step 4: Obtain User Information

Policy-Condition Group Templates-Search

List all condition group templates Get a specific condition group template Search for condition group templates via POST

Policy-Condition Groups-Create

Create a condition group for a specific provider risk level

Policy-Condition Groups-Search

List all condition groups Get a specific condition group Search for condition groups via POST Get a list of allowed methods

Policy-Condition Groups-Modify

Replace a condition group Update a condition group

Policy-Condition Groups-Delete

Delete a condition group

Policy-Condition Templates-Search

List all condition templates Get a specific condition template Search for condition templates via POST Get a list of allowed methods

Policy-Conditions-Create

Create a condition - provider risk level equals a certain value

Policy-Conditions-Search

List all conditions Get a specific condition Search for conditions via POST Get a list of allowed methods

Policy-Conditions-Modify

Replace a condition Update a condition

Policy-Conditions-Delete

Delete a condition

Policy-Network Perimeter

Create a Network Perimeter IPV6 Address Get a Network Perimeter Search a Network Perimeter for an IP Adress Version Filter Search a Network Perimeter for an IP Adress Name Filter Search NetworkPerimeters Using Post Update a Network Perimeter (Add, Replace and Remove an IP Address)

Policy-Policies-Create

Create a sign-in policy

Policy-Policies-Search

Get a specific policy List all policies Search for policies via POST Get a list of allowed methods

Policy-Policies-Modify

Update a policy

Policy-Policies-Delete

Delete a specific policy

Policy-Policy Templates-Search

Get a specific Policy Template List all policy templates Search a policy templates via POST Get a list of allowed methods

Policy-Policy Types-Search

Get a specific policy type List all policy types Search for policy types via POST Get a list of allowed methods

Policy-Rule Templates-Search

Get a specific rule template List all rule templates

Policy-Rules-Create

Policy-Rules-Search

Get a specific rule List all rules Search for rules via POST Get a list of allowed methods

Policy-Rules-Modify

Update a specific rule

Policy-Rules-Delete

Delete a specific rule

Reports-PDF and CSV

Generate unsuccessful login attempts report (PDF)Download report/diagnostic files

Get multiple reports (count)

SAML-Service Provider-Search

Search all service providers

SAML-Service Provider-Create

Create a service provider

SAML-Identity Provider-Search

Search all identity providers (return specific attributes)Search for a specific identity provider (return specific attributes)

SAML-Identity Provider-Modify

Disable identity provider

Self Service-Update Account Information

Replace Me Update Me (multiple attributes)

Self Service-Change Password

Self-service password change

Self Service-Email Verification

Step 1: User makes a change to their info Step 2: User initiates self-service email verification Step 3: Obtain user token Step 4: Self-verify email address

Self Service-Password Reset

Step 1: Retrieve password recovery options to get masked email value Step 2: Self-service password reset requestor Step 3: Obtain user token Step 4: Self-service password reset

Self Service-Favorite or Unfavorite an App

Step 1: My apps Step 2: Favorite or unfavorite an app

Get my groups Retrieve password recovery options Retrieve my accesses Retrieve my apps

Search all users (with search criteria)List the apps that a specific user has access to Search for users via POST

Check user password Validate password against password policy Validate password against password policy (specific user)Generate a password (suggestion for specific user)Reset user's password (random value)Reset user's password (known value)

Replace a user Update user (multiple attributes)

Users-Lifecycle

Assert user Start user activation (invite user)Deactivate user

Create a user Generate a unique username

Users-Membership

List all of a user's granted approles Search all users who are members of a specific group

Users-Grants-Revoke an AppRole from a User

Step 1: Get all direct grants for a user Step 2: Delete a grant

Users-Grants-Revoke a Managed App from a User

Step 1: Get direct grants for a user for a specific app Step 2: Delete a grant

Grant an approle to a user Search for all indirect grants of a specific app to any user List all grants of a specific app for a specific user

Terms of Use (TOU)-Terms of Uses (TOU)-Create

Create a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)-Delete

Terms of Use (TOU)-Terms of Uses (TOU)-Search

Get a TOU List all TOUs Search for TOUs via POST

Terms of Use (TOU)-Terms of Uses (TOU)-Modify

Replace a TOU Update a TOU with multiple TOU statements

Terms of Use (TOU)-Terms of Uses (TOU)

Add a TOU statement to a TOU using POST /Bulk

Terms of Use (TOU)-Terms of Use (TOU) Statements-Create

Create a TOU statement and assign to multiple TOUs

Terms of Use (TOU)-Terms of Use (TOU) Statements-Delete

Delete a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements-Search

Get a TOU statement Search for TOU statements associated with a TOU Search TOU statements using POST

Terms of Use (TOU)-Terms of Use (TOU) Statements-Modify

Replace a TOU statement Update a TOU statement

Terms of Use (TOU)-Terms of Use (TOU) Statements

Search for Supported Locales

IDCS Authn (Username Approve Notification) In Mobile App

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Repeat this Poll Request Repeatedly Until Success.Access IDCS API

IDCS Authn (Username Email) OTP

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Email OTP Access IDCS API

IDCS Authn (Username Password Login Using Backup) SMS

Get access token using ID Token Initiate - Authn API Authentication Request Submit - SMS OTP Code to complete Login and Make SMS As default Access IDCS API

IDCS Authn (Username Password)

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Password Access IDCS API

IDCS Authn (Username SMS MFA) Push Notification

Get access token using ID Token Initiate - Authn API Authentication Request Submit - Repeat this Poll Request Repeatedly Until Success.Access IDCS API

IDCS Authn (Username SMS) OTP

Get access token using ID Token Initiate - Authn API Authentication Request Submit - SMS OTP Access IDCS API

IDCS Authn (Username TOTP) Code From Mobile App

Get access token using ID Token Initiate - Authn API Authentication Request Submit - TOTP Code generated on Mobile App Access IDCS API

IDCS RADIUS Proxy

RADIUS Proxy-Create

Create a RADIUS Proxy

RADIUS Proxy-Delete

Delete a RADIUS Proxy

RADIUS Proxy-Lifecycle

Deactivate a RADIUS Proxy

RADIUS Proxy-Modify

Modify a RADIUS Proxy Replace a RADIUS Proxy

RADIUS Proxy-Search

Obtain listeners and mappings info Get a specific RADIUS Proxy Search RADIUS Proxies via POST Get client ID and client secret of App corresponding to RADIUS Proxy

RADIUS Proxy-RADIUS Proxy Listeners-Create

Create a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Delete

Delete a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Modify

Update a RADIUS Proxy Listener Replace a RADIUS Proxy Listener

RADIUS Proxy-RADIUS Proxy Listeners-Search

List all RADIUS Proxy Listeners Get a specific RADIUS Proxy Listener Search RADIUS Proxy Listeners via POST

RADIUS Proxy-RADIUS Proxy Mappings-Create

Create a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Delete

Delete a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Modify

Update a RADIUS Proxy Mapping Replace a RADIUS Proxy Mapping

RADIUS Proxy-RADIUS Proxy Mappings-Search

List all RADIUS Proxy Mappings (specific attributes)Get a specific RADIUS Proxy Mapping Search RADIUS Proxy Mappings via POST

RADIUS Proxy-RADIUS App-Create

Create RADIUS App

RADIUS Proxy-RADIUS App-Modify

Update RADIUS App (IP Address in CIDR format)

RADIUS Proxy-RADIUS App-Delete

Delete RADIUS App

RADIUS Proxy-RADIUS App-Search

Search all apps (with search criteria)

RADIUS Proxy-OAuth Token

Obtain access_token (client credentials)

Home IDCS APIsApps-Modify

Apps-Modify

Number of APIs: 2

Replace an app PUT {{HOST}}/admin/v1/Apps/{{appid}}
Update app - refreshTokenExpiry attribute PATCH {{HOST}}/admin/v1/Apps/{{appid}}

Remove allowed scope from application

Update app - refreshTokenExpiry attribute