Consists of a POSSESSION constraint, a KNOWLEDGE constraint, or both. You can't configure an INHERENCE constraint, but an inherence factor can satisfy the second part of a 2FA assurance if no other constraints are specified. Constraints are logically evaluated such that only one constraint object needs to be satisfied, but within a constraint object, each constraint property must be satisfied.
| Name | Type | Description | Notes |
|---|---|---|---|
| authentication_methods | List[AuthenticationMethodObject] | This property specifies the precise authenticator and method for authentication. <x-lifecycle class="oie"></x-lifecycle> | [optional] |
| excluded_authentication_methods | List[AuthenticationMethodObject] | This property specifies the precise authenticator and method to exclude from authentication. <x-lifecycle class="oie"></x-lifecycle> | [optional] |
| methods | List[str] | The authenticator methods that are permitted | [optional] |
| reauthenticate_in | str | The duration after which the user must re-authenticate regardless of user activity. This re-authentication interval overrides the Verification Method object's `reauthenticateIn` interval. The supported values use ISO 8601 period format for recurring time intervals (for example, `PT1H`). | [optional] |
| required | bool | This property indicates whether the knowledge or possession factor is required by the assurance. It's optional in the request, but is always returned in the response. By default, this field is `true`. If the knowledge or possession constraint has values for `excludedAuthenticationMethods` the `required` value is false. <x-lifecycle class="oie"></x-lifecycle> | [optional] |
| types | List[str] | The authenticator types that are permitted | [optional] |
from okta.models.access_policy_constraint import AccessPolicyConstraint
# TODO update the JSON string below
json = "{}"
# create an instance of AccessPolicyConstraint from a JSON string
access_policy_constraint_instance = AccessPolicyConstraint.from_json(json)
# print the JSON string representation of the object
print(AccessPolicyConstraint.to_json())
# convert the object into a dict
access_policy_constraint_dict = access_policy_constraint_instance.to_dict()
# create an instance of AccessPolicyConstraint from a dict
access_policy_constraint_from_dict = AccessPolicyConstraint.from_dict(access_policy_constraint_dict)