Create
Create a recovery policy.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.
Body
The RecoveryPolicyServiceCreateRequest message.
A human-readable name for the policy.
The credential types a user may use to recover access.
CREDENTIAL_TYPE_UNSPECIFIED, CREDENTIAL_TYPE_PASSKEY, CREDENTIAL_TYPE_PASSWORD, CREDENTIAL_TYPE_TOTP, CREDENTIAL_TYPE_EMAIL_OTP, CREDENTIAL_TYPE_RECOVERY_CODE, CREDENTIAL_TYPE_DELEGATED_GOOGLE, CREDENTIAL_TYPE_DELEGATED_MICROSOFT, CREDENTIAL_TYPE_UPSTREAM_IDP The minimum assurance level a recovery ceremony must reach.
AUTH_LEVEL_UNSPECIFIED, AUTH_LEVEL_NONE, AUTH_LEVEL_SINGLE_FACTOR, AUTH_LEVEL_MULTI_FACTOR, AUTH_LEVEL_PHR, AUTH_LEVEL_PHRH When a user matches more than one policy, the policy with the highest priority applies.
When true, a successful recovery revokes existing credentials and forces re-enrollment.
Response
Successful response
The RecoveryPolicyServiceCreateResponse message.
RecoveryPolicy defines how users recover access when they lose their credentials.