POST
/
mfa
/
admin
/
policies
Create a 4D sign-on policy
curl --request POST \
  --url https://coreapi-dev.us.bcpapers.ca/mfa/admin/policies \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "action": "<string>",
  "policy_name": "<string>",
  "risk_level": "<string>",
  "surface": "<string>",
  "enabled": true,
  "group_id": "<string>",
  "recommended": true
}
'
{
  "action": "<string>",
  "created_at": "<string>",
  "enabled": true,
  "group_id": "<string>",
  "id": "<string>",
  "policy_name": "<string>",
  "recommended": true,
  "requirement": "<string>",
  "risk_level": "<string>",
  "surface": "<string>"
}

Authorizations

Authorization
string
header
required

Paste the JWT token only (no "Bearer " prefix needed — the UI adds it automatically).

Body

application/json

Policy

action
string
required
policy_name
string
required
requirement
enum<string>
required
Available options:
passkeys,
strong,
mfa
risk_level
string
required
surface
string
required
enabled
boolean
group_id
string

Response

Created

action
string
created_at
string
enabled
boolean
group_id
string
id
string
policy_name
string
requirement
string
risk_level
string
surface
string