okta / okta-sdk-python

Apache License 2.0
240 stars 142 forks source link

authenticationMethods missing from okta/models/possession_constraints but visible in raw api #420

Open ghals13 opened 2 months ago

ghals13 commented 2 months ago

Hello,

authenticationMethods field is missing in okta/models/possession_constraints? https://github.com/okta/okta-sdk-python/blob/master/okta/models/possession_constraint.py but visible in raw api https://tenant-admin.okta.com/api/v1/policies/<ruleid>/rules

eg (you can test via gui by clicking

Authentication methods->Allow specific authentication methods

Could you please add it in ?

e.g

   "actions": {
            "appSignOn": {
                "access": "ALLOW",
                "verificationMethod": {
                    "factorMode": "2FA",
                    "type": "ASSURANCE",
                    "reauthenticateIn": "PT0S",
                    "constraints": [
                        {
                            "knowledge": {
                                "required": true,
                                "types": [
                                    "password"
                                ],
                                "reauthenticateIn": "PT0S"
                            },
                            "possession": {
                                "required": true,
                                "authenticationMethods": [
                                    {
                                        "key": "okta_verify",
                                        "method": "signed_nonce"
                                    }
                                ],
                                "hardwareProtection": "REQUIRED",
                                "phishingResistant": "REQUIRED",
                                "userPresence": "REQUIRED",
                                "userVerification": "REQUIRED"
                            }
                        }
                    ]
                }
            }
        },
ghals13 commented 2 months ago

ps https://developer.okta.com/docs/reference/api/policy/#authenticator-key-type-method-and-characteristic-relationships-for-constraints