Create a new Issuer configuration

POST 
/v1/distributedissuers/configurations

deprecated

This endpoint has been deprecated and may be replaced or removed in future versions of the API.

Adds a new Issuer Configuration, which links the following together - Sub CA Provider, Policies used to determine which certificates can be issued, and the IdP (Identity Provider) the Issuer should trust when receiving signed JWTs from its clients.

Deprecated: use POST /v1/distributedissuers/configurations/DISTRIBUTED_ISSUER instead. This alias creates a DISTRIBUTED_ISSUER configuration and behaves identically.

Request

Responses

201

Issuer configuration successfully created; details in response body.

400

The request was rejected. Possible causes, by error code:

• 10006: Malformed JSON body or an unknown/unrecognized field; minTlsVersion is not TLS12 or TLS13; clientAuthentication.type is missing or unknown; or a cloud-provider regions value is not a recognized AWS or Google region.
• 50200: name is empty.
• 50201: subCaProviderId is missing.
• 50202: The policyIds list is empty.
• 50205: A configuration with the same name already exists.
• 50207: JWT_JWKS urls list is empty.
• 50208: JWT_OIDC baseUrl is empty.
• 50209: JWT_OIDC audience is empty.
• 50212: AWS accountIds contains a value that is not a 12-digit string.
• 50213: AWS accountIds list is empty.
• 50214: AWS regions is missing.
• 50216: Azure subscriptionIds list is empty.
• 50218: Google projectIdentifiers contains an invalid identifier.
• 50219: Google projectIdentifiers list is empty.
• 50220: Google regions is missing.
• 50221: name is longer than 64 characters.
• 50222: A JWT_JWKS URL is not a valid HTTPS URL of at most 2048 characters.
• 50223: JWT_OIDC baseUrl is longer than 2048 characters.
• 50224: JWT_OIDC audience is longer than 256 characters.
• 50225: clientAuthorization configuration custom-claim alias exceeds 128 characters.
• 50226: clientAuthorization allow-all-policies custom-claim alias exceeds 128 characters.
• 50227: clientAuthorization allowed-policies custom-claim alias exceeds 128 characters.
• 50228: advancedSettings is invalid (e.g. includeRawCertDataInAuditLog is true while enableIssuanceAuditLog is disabled).
• 50229: JWT_STANDARD_CLAIMS clients list is empty.
• 50230: Two JWT_STANDARD_CLAIMS clients share the same issuer/JWKS-URI pair.
• 50231: A JWT_STANDARD_CLAIMS client issuer is not a valid HTTPS URL while jwksUri is absent.
• 50232: JWT_STANDARD_CLAIMS audience is empty.
• 50233: JWT_STANDARD_CLAIMS audience is longer than 256 characters.
• 50234: A JWT_STANDARD_CLAIMS client name is empty.
• 50235: A JWT_STANDARD_CLAIMS client name is longer than 64 characters.
• 50236: A JWT_STANDARD_CLAIMS client issuer is empty.
• 50237: A JWT_STANDARD_CLAIMS client issuer is longer than 2048 characters.
• 50238: A JWT_STANDARD_CLAIMS client jwksUri is longer than 2048 characters.
• 50239: A JWT_STANDARD_CLAIMS client jwksUri is invalid.
• 50240: A JWT_STANDARD_CLAIMS client subjects list is empty.
• 50241: A JWT_STANDARD_CLAIMS client allowedPolicyIds list is empty.
• 50242: JWT_OIDC baseUrl is not a valid HTTPS URL.

404

The referenced entity was not found. Possible causes, by error code:

• 50203: The referenced Sub CA provider does not exist in this tenant.
• 50204: One or more of the referenced policies do not exist in this tenant.