TenantAuthenticationPolicy

Per-tenant authentication policy (MFA requirements, session rules).

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
GET	/api/v1/auth-policy	Tenant Authentication Policy Get	tenant:auth-policy.read
PUT	/api/v1/auth-policy	Tenant Authentication Policy Put	tenant:auth-policy.write
DELETE	/api/v1/auth-policy	Tenant Authentication Policy Delete	tenant:auth-policy.write

Operation details

GET /api/v1/auth-policy

Tenant Authentication Policy Get

• Operation ID: tenantAuthenticationPolicyGet
• Required scopes: tenant:auth-policy.read

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PUT /api/v1/auth-policy

Tenant Authentication Policy Put

• Operation ID: tenantAuthenticationPolicyPut
• Required scopes: tenant:auth-policy.write

Request body (required): application/json → AuthPolicyRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

DELETE /api/v1/auth-policy

Tenant Authentication Policy Delete

• Operation ID: tenantAuthenticationPolicyDelete
• Required scopes: tenant:auth-policy.write

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)