Start an OS-account binding under the current administrator's user authorization and configured step-up; direct TLS required.

POST

/v1/auth/os-account-bindings

curl --request POST \
  --url https://example.com/v1/auth/os-account-bindings \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "account": "example", "tenant": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "user_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" }'

• this engine

Starts a single-use ceremony under the current administrator authorization and configured step-up policy. The selected user must complete native account control from its own session; only direct TLS is accepted.

Authorizations

• bearerAuth
• browserSession

Request Body ^required

Media type application/json

object

account

required

string

>= 1 characters <= 256 characters

tenant

required

string format: uuid

user_id

required

string format: uuid

Example ^generated

{
  "account": "example",
  "tenant": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "user_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

Responses

200

OK

Media type application/json

object

ceremony_id

required

string format: uuid

Example ^generated

{
  "ceremony_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

400

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

401

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

403

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

404

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

409

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

429

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

503

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}