Emisores

Crear emisor de federación

$client->organization->federation->issuers->create(string issuerURL, string name, ?bool checkJTI, ?JWKS jwks, ?int maxJWTLifetimeSeconds): FederationIssuer

POST/v1/organizations/federation_issuers

Requiere un token de acceso OAuth con el alcance org:admin, obtenido de ant auth login --scope org:admin o de una regla de federación de identidades de carga de trabajo; no se aceptan claves de Admin API. Consulta Administrar WIF con la Admin API.

Listar emisores de federación

$client->organization->federation->issuers->list(?bool includeArchived, ?int limit, ?string page): PageCursor<FederationIssuer>

GET/v1/organizations/federation_issuers

Obtener emisor de federación

$client->organization->federation->issuers->retrieve(string federationIssuerID): FederationIssuer

GET/v1/organizations/federation_issuers/{federation_issuer_id}

Actualizar emisor de federación

$client->organization->federation->issuers->update(string federationIssuerID, ?bool checkJTI, ?string issuerURL, ?JWKS jwks, ?bool jwksPollingDisabled, ?int maxJWTLifetimeSeconds, ?string name): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}

Archivar emisor de federación

$client->organization->federation->issuers->archive(string federationIssuerID): FederationIssuer

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class FederationIssuer { $type = 'federation_issuer'; $id; $archivedAt; /* 12 more */ }

class FederationIssuerPollStatus { $consecutiveFailures; $lastFetchedAt; $nextPollAt; }

int consecutiveFailures

Consecutive fetch failures since the last success.

?\Datetime lastFetchedAt

When the last successful fetch completed.

?\Datetime nextPollAt

When the next fetch is scheduled. Null if paused.

class JWKSDiscovery { $type = 'discovery'; $caCertPEM; $discoveryBase; }

"discovery" type

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

?string discoveryBase

Set when the discovery URL differs from issuer_url.

class JWKSExplicitURL { $type = 'explicit_url'; $url; $caCertPEM; }

"explicit_url" type

string url

JWKS endpoint.

?string caCertPEM

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

class JWKSInline { $type = 'inline'; $keys; }

"inline" type

list<array<string,mixed>> keys

Inline JWK objects.