Step 4: Assign the sign-on policy to an application

POST {{apiPath}}/environments/{{envID}}/applications/{{passwordlessAppID}}/signOnPolicyAssignments

To use the new sign-on policy, the POST /environments/{{envID}}/applications/{{appID}}/signOnPolicyAssignments operation assigns the new passwordless sign-on policy to the application specified by its ID in the request URL. The request body requires the sign-on policy property id and an integer value for the priority property.

Note: If an application's sign-on policy assignments include only one policy, such as the Passwordless sign-on policy, then the application uses only that sign-on policy. If the application has multiple assigned sign-on policies, it uses uses sign-on policies by priority (in ascending order). If an authorization request specifies the Passwordless sign-on policy in the acr_values property, then the application uses only the Passwordless sign-on policy. When acr_values are specified in the authorization request, the sign-on policy (or policies) specified must be assigned to the application.

Request Body

{"priority"=>1, "signOnPolicy"=>{"id"=>"{{passwordlessPolicyID}}"}}

HEADERS