Step 6: Create an Email MFA sign-on policy action

POST {{apiPath}}/environments/{{envID}}/signOnPolicies/{{mfaSignonPolicyID}}/actions

This step associates a sign-on policy action with the new sign-on policy you created in Step 5. The POST /environments/{{envID}}/signOnPolicies/{{policyID}}/actions operation creates the sign-on policy action resource, which is associated with the sign-on policy ({{policyID}}) specified in the request URL.

This action is a second MULTI_FACTOR_AUTHENTICATION sign-on policy action type to prompt for a one-time passcode verification through the user's email device.

For a sign-on action that supports a multi-factor authentication action, the sign-on policy action must enable at least one MFA device type. This action enables the email device type and sets the sms device type to false.

Request Body

{"priority"=>10, "type"=>"MULTI_FACTOR_AUTHENTICATION", "sms"=>{"enabled"=>false}, "email"=>{"enabled"=>true}}

HEADERS