Skip to main content
POST
Create Service Account Credential

Authentication

❌ Organization User (CustomerEmployee)
❌ Delegated User (EndUser)
✅ Service Account

Required Permissions

No permission required.

Authorizations

Authorization
string
header
required

Bearer Token: Used to authenticate API requests. More details how to generate the token: Authentication flows

X-DFNS-USERACTION
string
header
required

User Action Signature: Used to sign the change-inducing API requests. More details how to generate the token: User Action Signing flows

Body

application/json
publicKey
string
required
Pattern: ^-----BEGIN (RSA )?PUBLIC KEY-----[A-Za-z0-9+/=\n\r\\]+-----END (RSA )?PUBLIC KEY-----\s?$
name
string

Human-readable name of the credential.

Minimum string length: 1

Response

200 - application/json

Success

kind
enum<string>
required
Available options:
Fido2,
Key,
Password,
PasswordProtectedKey,
RecoveryKey,
SessionKey,
Totp
credentialId
string
required

Credential ID from the WebAuthn authenticator (base64url).

credentialUuid
string
required

Dfns-internal UUID of the credential.

dateCreated
string<date-time>
required

ISO 8601 date (must be UTC). Date the credential was created.

Example:

"2023-04-14T20:41:28.715Z"

isActive
boolean
required

Whether the credential is active.

name
string
required

Human-readable name of the credential.

publicKey
string
required

Public key of the credential.

relyingPartyId
string
required

Relying party identifier associated with the credential.

origin
string
required

Origin where the credential was created.