Skip to content

Replace the cloned login page detection configuration

Request

Replaces your organization's cloned login page detection configuration with the configuration you send. Any rule you don't include is deleted.

A rule with an id updates the existing rule with that id. A rule without an id is created. Rules are evaluated in the order you send them, and the first rule that matches wins.

To change part of the configuration, retrieve it first, apply your changes, and send the complete configuration back.

Security
x-api-key
Bodyapplication/jsonrequired

The complete set of rules to save.

globalsobject(Cloned Login Page Detection Globals)required

Control-wide settings that apply across every rule.

rulesArray of objects(Cloned Login Page Detection Rule)required

Complete list of Cloned Login Page Detection rules.

PUT
/v1/controls/clonedLoginPageDetection/configuration
curl -i -X PUT \
  https://api.pushsecurity.com/v1/controls/clonedLoginPageDetection/configuration \
  -H 'Content-Type: application/json' \
  -H 'x-api-key: YOUR_API_KEY_HERE' \
  -d '{
    "globals": {},
    "rules": []
  }'

Responses

OK

Bodyapplication/json
globalsobject(Cloned Login Page Detection Globals)required

Control-wide settings that apply across every rule.

rulesArray of objects(Cloned Login Page Detection Rule)required

Complete list of Cloned Login Page Detection rules.

Response
{ "globals": { "ignoredHosts": [ "*.internal.example.com", "build-server", "10.0.1.1" ] }, "rules": [ { "id": "c478966c-f927-411c-b919-179832d3d50c", "name": "Warn Finance on cloned login pages", "enabled": true, "mode": "WARN", "title": "Suspicious login page", "subtext": "This page looks like a cloned login page. Do not enter your credentials.", "ignoreButtonText": "Proceed anyway", "criteria": { "employeeIds": { "matches": [] }, "employeeGroups": { "matches": [] } } } ] }