Skip to main content
Version: Latest (4.0.6)
Version: 1.0

Recertification Campaign API

Access recertification is the formal review process where designated leaders periodically attest that users hold only the group memberships and roles they legitimately need. This API lets you automate campaign configuration, reviewer assignment, access review decisions, reporting, and audit export. It covers the same capabilities as the cidaas Review Center portal.

Key Capabilities​

  • Campaign Management: Create, update, filter, and delete recertification campaigns and target groups.
  • Access Reviews: Fetch assigned review queues and record Keep, Reduce, or Revoke decisions.
  • Reporting & Auditing: Query real-time review progress and export tamper-evident CSV or JSON audit reports.

Authentication​

Security Scheme Type:

oauth2

OAuth Flow (authorizationCode):

Scopes:

  • cidaas:campaign_read: Read campaigns, groups, reports, and review user lists

  • cidaas:campaign_write: Create and update campaigns

  • cidaas:campaign_delete: Delete campaigns

  • cidaas:campaign_review: Submit access review decisions

OAuth Flow (clientCredentials):

Scopes:

  • cidaas:campaign_read: Read campaigns, groups, reports, and review user lists

  • cidaas:campaign_write: Create and update campaigns

  • cidaas:campaign_delete: Delete campaigns

  • cidaas:campaign_review: Submit access review decisions