GetAuthPolicyResponseBody

$schemauri

A URL to the JSON Schema for this object.

Example: https://example.com/schemas/GetAuthPolicyResponseBody.json

loginEnabledbooleanrequired

Whether interactive login is currently accepted on this surface

mfaEnabledbooleanrequired

Whether the master MFA switch is on — a user MFA settings page should render an inert badge when this is false

oauthSignupAllowedbooleanrequired

Whether an unknown email returning from an OAuth flow may be auto-provisioned on this surface

passwordLoginBreakGlassEffectivebooleanrequired

Operator endpoint only: the boot-time break-glass override is set AND the persisted policy is false or unreadable, so the console must render the labelled emergency login form. Always false on the client endpoint.

passwordLoginEnabledboolean | nullnullablerequired

Persisted per-surface email/password policy. Null ONLY when the policy store is unreadable while the operator break-glass is active — the emergency case; every ordinary read is non-null.

passwordMaxLengthint64required

Maximum password length the signup form should accept

passwordMinLengthint64required

Minimum password length the signup form should advertise

passwordRequireDigitbooleanrequired

Whether the signup form should advertise a digit requirement

passwordRequireLowerbooleanrequired

Whether the signup form should advertise a lowercase requirement

passwordRequireSymbolbooleanrequired

Whether the signup form should advertise a symbol requirement

passwordRequireUpperbooleanrequired

Whether the signup form should advertise an uppercase requirement

registrationEnabledbooleanrequired

Whether self-service signup is currently accepted on this surface

GetAuthPolicyResponseBody

{
  "$schema": "https://example.com/schemas/GetAuthPolicyResponseBody.json",
  "loginEnabled": true,
  "mfaEnabled": true,
  "oauthSignupAllowed": true,
  "passwordLoginBreakGlassEffective": true,
  "passwordLoginEnabled": true,
  "passwordMaxLength": 0,
  "passwordMinLength": 0,
  "passwordRequireDigit": true,
  "passwordRequireLower": true,
  "passwordRequireSymbol": true,
  "passwordRequireUpper": true,
  "registrationEnabled": true
}