Cloud Administration Read FIDO Configuration API

The Cloud Administration Read FIDO Configuration API allows you to retrieve the current configuration of FIDO authenticators. This API requires the rsa.fido.configuration.read OAuth permission. For more information, see OAuth 2.0-Based Permissions for the Cloud Administration APIs.

For information about managing access to this API, see Accessing the Cloud Administration APIs.

Authentication

Clients calling this API must authenticate themselves by including a JSON Web Token in a request. For instructions on using this token, see Authentication for the Cloud Administration APIs.

Software Developer Kit

You can download the API Software Developer Kit (SDK) from Cloud Administration REST API Download.

Request Requirements

Use the following information to retrieve FIDO configuration.

Example Request Data

The request does not contain any parameters. The following example displays a request.

GET AdminInterface/restapi/v1/configuration/fido

Accept: application/json

Authorization: Bearer <JWT token>

Example Response Body

The following example response shows the FIDO configuration.

  {
    "fidoAppIdDTOList": [
        {
            "id": 2,
            "errors": {},
            "appId": "https://google.com",
            "fidoAppIdDtoType": "UNKNOWN"
        }
    ],
    "passkeyStatus": false,
    "endPasskeyGracePeriodDate": 1771365600000,
    "minimumCertificationLevel": "FIDO_CERTIFIED_L2",
    "allowedAuthenticatorsList": "DS100,yubikey",
    "deniedAuthenticatorsList": "DS101,yubik*",
    "allowedAuthenticatorsListEnabled": true,
    "deniedAuthenticatorsListEnabled": true,
    "fidoStaticNamedList": [
        {
            "id": null,
            "createDate": null,
            "errors": {},
            "aaguid": null,
            "name": "RSA Authenticator App",
            "enabled": true
        },
        {
            "id": null,
            "createDate": null,
            "errors": {},
            "aaguid": null,
            "name": "RSA DS100",
            "enabled": false
        },
        {
            "id": null,
            "createDate": null,
            "errors": {},
            "aaguid": null,
            "name": "Windows Hello",
            "enabled": false
        }
    ],
    "fidoAddedNamedList": [
        {
            "id": "c9657914-c6d4-2afd-ea11-1a168f98bb3a",
            "createDate": null,
            "errors": {},
            "aaguid": "5626bed4-e756-430b-a7ff-ca78c8b12738",
            "name": "VALMIDO PRO FIDO",
            "enabled": true
        },
        {
            "id": "e59352d2-bc54-17ed-83b3-093f24ef5a99",
            "createDate": null,
            "errors": {},
            "aaguid": "22222222-2222-2222-2222-222222222222",
            "name": "Unknown",
            "enabled": true
        }
    ],
    "errors": {},
    "baseDomain": "https://t1-digitalpowerhouse-01.auth-dev.securid.com",
    "cname": null,
    "errorString": "Errors: {}"
}

Response Body Parameters

The table lists the parameters returned in the response body.

Response Codes

The following table lists the response codes and their descriptions.