Skip to content

Replace the account condition enforcement configuration

Request

Replaces your organization's account condition enforcement configuration with the configuration you send. Any rule you don't include is deleted.

A rule with an id updates the existing rule with that id. A rule without an id is created. Rules are evaluated in the order you send them, and the first rule that matches wins.

To change part of the configuration, retrieve it first, apply your changes, and send the complete configuration back.

Security
x-api-key
Bodyapplication/jsonrequired

The complete configuration to save.

rulesArray of objects(Account Condition Enforcement Rule)required

Complete list of Account Condition Enforcement rules.

globalsobject

Reserved for control-wide settings. Empty for this control.

Example:
{}
curl -i -X PUT \
  https://api.pushsecurity.com/v1/controls/accountConditionEnforcement/configuration \
  -H 'Content-Type: application/json' \
  -H 'x-api-key: YOUR_API_KEY_HERE' \
  -d '{
    "globals": {},
    "rules": []
  }'

Responses

OK

Bodyapplication/json
rulesArray of objects(Account Condition Enforcement Rule)required

Complete list of Account Condition Enforcement rules.

globalsobject

Reserved for control-wide settings. Empty for this control.

Example:
{}
Response
{ "globals": {}, "rules": [ { "id": "c478966c-f927-411c-b919-179832d3d50c", "name": "Block personal accounts where a password login is observed.", "enabled": true, "mode": "BLOCK", "title": "Account blocked", "subtext": "Logging into this app with a personal email address is not permitted.", "terminateButtonText": "Terminate session", "continueButtonText": "Continue session", "criteria": { "employeeIds": { "matches": [] }, "employeeGroups": { "matches": [] }, "appTypes": { "matches": [] }, "loginDomains": { "matches": [] }, "loginTypes": { "matches": [] }, "browserTypes": { "matches": [] }, "domainScope": { "matches": [] }, "profileScope": { "matches": [] } } } ] }