Skip to main content
Version: 4.0.2
Version: 1.0.0

Verification Options API

Verification Options API

Manage Verification Options profiles that define MFA / step-up enforcement rules (mode, time interval, allowed methods, password policy reference, app attestation). Applications reference a profile via verification_options_id on the App Configuration API.

Ownership

Profiles are either system-owned (built-in defaults) or user-owned (tenant-created). GET on a system-owned entry returns 403 Forbidden.

Authentication

Requires OAuth2 scope cidaas:verification_read, cidaas:verification_write, or cidaas:verification_delete depending on the operation. Create, update, and delete additionally require the CIDAAS_ADMINS role.

Related documentation

Authentication

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • cidaas:verification_read: read access to verification setup.

  • cidaas:verification_write: write access for verification setup.

  • cidaas:verification_delete: delete access for verification setup.

OAuth Flow (clientCredentials):

Scopes:

  • cidaas:verification_read: read access to verification setup.

  • cidaas:verification_write: write access for verification setup.

  • cidaas:verification_delete: delete access for verification setup.