The Cloud Administration Authenticator Details API enables Help Desk administrators to look up user authenticators using a User ID.
Note: The API can retrieve all user authenticators for a single user per request.
Clients calling this API must authenticate themselves by including a JSON Web Token in a request. For instructions on using this token, see Authentication for the Cloud Administration APIs .
This API can use an API key that is associated with either the Super Administrator or Help Desk Administrator role. For more information, see Manage the Cloud Administration API Keys.
You can download the API Software Developer Kit (SDK) from Cloud Administration REST API Download.
Use the following information to retrieve information about a particular user's authenticator.
The resource identifier is optional.
The following example displays a request to retrieve all authenticator types other than browser authenticator type.
Authorization: Bearer <JWT token>
The request does not contain any parameters.
The resource identifier <userId> is a unique user identifier that is sent in the response to the Cloud Administration User Details API .
The following example response shows the status of a single user's authenticator.
"id": "DrT4QEbDIwB2Z1yBUpoC0GSF8MY6GDSex5xlvwH6oOPBFLp-47om_rur3vZ_b52nexoy0SwRASN5zkT8X9-0zg", "name": "john.doe%40rsa.com's%20FIDO%20token", "userid": "e71d6d46-0113-495a-9445-b3f71b6e3f36", "osType": "FIDO Token", "capabilities": null, "registeredDate": "2018-09-06T15:34:44.000Z", "lastUsedDate": "2018-09-06T15:34:44.000Z"
"osType": "FIDO Token",
The following table shows property response descriptions and data types.
registeredDate (for FIDO authenticator)
Timestamp when the authenticator was registered.
Timestamp when the FIDO authenticator was registered. For FIDO authenticators, the following fields are created:_atregistration_time
Timestamp when the authenticator was last used. See https://www.w3.org/TR/NOTE-datetime for information on formatting timestamps in ISO 8601 format.
Note: The lastUsedDate is deprecated and may be removed in a future version of the API. This property is retained for backwards compatibility. This value is not accurate and should not be relied upon.
The following table shows response codes and descriptions for the Authenticator Details API.