Application Token Basic + Pin

1 min

GET

{{url}}/sc-aapm-ui/rest/aapm/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON or default

This method gives the secret data of bound Vault account.
For Application Token accounts which are bound to a single Vault account, the parameters sapmAccountPath and sapmAccountName are not needed.
For Application Token accounts which are bount to multiple Vault accounts&groups the user must have set sapmAccountPath and sapmAccountName parameters together with the token.
This method should be used only if the authentication level is set to BASIC + PIN. KRON PAM shares the PIN after first request to the pre-defined Port of the user.
responseType=JSON parameter returns the response as JSON. If this parameter is not set, the return type for dynamic accounts are plain text.

urlstring

passwordExpirationInMinutestring

passwordChangeRequiredstring

commentstring

tokenstring

sapmAccountPathstring<p>If there is only 1 Vault Account related to the token, this param. can be null</p>

sapmAccountNamestring<p>If there is only 1 Vault Account related to the token, this param. can be null</p>

pinstring

responseTypestringUser has to set this parameter to JSON if JSON response is needed.

Content-Typestring

X-XSRF-TOKENstring

200

curl --request GET \
     --url '{{url}}/sc-aapm-ui/rest/aapm/password?passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default&passwordExpirationInMinute=30&passwordChangeRequired=false&comment=COMMENT&token=TOKEN&sapmAccountPath=ACCOUNT_PATH&sapmAccountName=ACCOUNT_NAME&pin=PIN&responseType=JSON%20or%20default' \
     --header 'accept: application/json' \
     --header 'x-xsrf-token: {{csrftoken}}'