Application Token Basic + Pin

1 min

GET

{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default

Request Overview

The Application Token Basic + Pin method provides secret data for bound Vault accounts, with specific parameters depending on whether the account is bound to a single or multiple Vault accounts.

Usage:

Single Vault Account: sapmAccountPath and sapmAccountName parameters are not required.
Multiple Vault Accounts/Groups: Both sapmAccountPath and sapmAccountName must be provided along with the token.
Authentication: This method should be used only if the authentication level is set to BASIC + PIN. The PIN is shared by KRON PAM after the first request to the user’s pre-defined port.
Response Format: To receive the response in JSON format, set the responseType=JSON parameter. If this parameter is not set, the default response type for dynamic accounts is plain text.

urlstring

passwordExpirationInMinutestring

passwordChangeRequiredstring

commentstring

tokenstring

sapmAccountPathstring<p>If there is only 1 Vault Account related to the token, this param. can be null</p>

sapmAccountNamestring<p>If there is only 1 Vault Account related to the token, this param. can be null</p>

pinstring

responseTypestringUser has to set this parameter to JSON if JSON response is needed.

Content-Typestring

X-XSRF-TOKENstring

200

curl --request GET \
     --url '{{url}}/aioc-rest-web/rest/aapm/request/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default' \
     --header 'accept: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}'