Create Service Account Credential
Add a new Key credential to the OIDC service account authenticated by this request. The caller must be an OIDC service account — the IdP access token identifies the SA; the user-action is signed with an existing active credential to prove rotation authority.
Authentication
❌ Organization User (CustomerEmployee)❌ Delegated User (
EndUser)✅ Service Account
Required Permissions
No permission required.Authorizations
Bearer Token: Used to authenticate API requests. More details how to generate the token: Authentication flows
User Action Signature: Used to sign the change-inducing API requests. More details how to generate the token: User Action Signing flows
Body
Response
Success
Fido2, Key, Password, PasswordProtectedKey, RecoveryKey, SessionKey, Totp Credential ID from the WebAuthn authenticator (base64url).
Dfns-internal UUID of the credential.
Whether the credential is active.
Human-readable name of the credential.
Public key of the credential.
Relying party identifier associated with the credential.
Origin where the credential was created.