Skip to main content

Create a certificate credential

POST 
/nevisidm/api/core/v1/:clientExtId/users/:userExtId/certificates

Since: 2.71.0

Required permission(s): AccessControl.CredentialCreate,AccessControl.CredentialChangeState or SelfAdmin Role

Creates a new X.509 certificate credential for the specified user.

The certificate value is required and must be a valid PEM-encoded X.509 certificate. The certificate attributes (subject DN, issuer DN, fingerprint, serial number, and subject key identifier) are extracted automatically from the certificate value and stored alongside it.

If a policy is specified, it must be of type CertificatePolicy. If omitted, the default certificate policy configured for the client is used. The certificate is validated against the policy constraints (e.g. allowed issuer CN, required subject DN elements).

If an initial state is provided, the caller must have the AccessControl.CredentialChangeState permission in addition to AccessControl.CredentialCreate.

In self-admin mode, a valid JWT token must be provided in the X-Token request header.

Request​

Responses​

Certificate credential created successfully

Response Headers
    Location

    URL of the created resource

Last updated on