pingcli mfa fido2-policies create
Create a new FIDO2 policy
Synopsis
Create a new FIDO2 policy in a PingOne environment
pingcli mfa fido2-policies create [flags]
Examples
# Create a new FIDO2 policy from a JSON file
pingcli mfa fido2-policies create --environment-id <env-id> --from-file fido2-policy.json
# Create a new FIDO2 policy from stdin
pingcli mfa fido2-policies create --environment-id <env-id> --from-file - < fido2-policy.json
# Create a new FIDO2 policy, overriding scalar fields with flags
# ("backupEligibility", "mdsAuthenticatorsRequirements", "userDisplayNameAttributes",
# and "userVerification" always come from the file - they cannot be set as flags)
pingcli mfa fido2-policies create --environment-id <env-id> --name "Default FIDO2 Policy" --relying-party-id example.com --from-file fido2-policy.json
Options
-e, --environment-id string The PingOne environment ID
-h, --help help for create
-f, --from-file string Path to a JSON file containing the request body, or "-" to read from stdin.
--attestation-requirements string The level of attestation required from authenticators
--authenticator-attachment string The allowed authenticator attachment modality
--default Whether this policy should serve as the environment default FIDO2 policy
--description string The description of the FIDO2 policy
--device-display-name string The name to display for the device in registration and authentication windows
--discoverable-credentials string The server-side discoverable credential preference
--name string The name to use for the FIDO2 policy
--public-key-credential-hint []string Ordered hints for preferred public-key credential types; repeatable or comma-separated
--relying-party-id string The ID of the relying party, typically a domain name
Options inherited from parent commands
-C, --config string The relative or full path to a custom Ping CLI configuration file. (default $HOME/.pingcli/config.yaml)
-D, --detailed-exitcode Enable detailed exit code output. (default false) 0 - pingcli command succeeded with no errors or warnings. 1 - pingcli command failed with errors. 2 - pingcli command succeeded with warnings.
-O, --output-format string Specify the console output format. (default text) Options are: json, ndjson, ndjson-typed, ndjson-wrapped, text.
-P, --profile string The name of a configuration profile to use.
--debug Enable debug output for error messages, including stack traces and transaction IDs. (default false)
--log-file string Write logs to a file at the given path. File logging is disabled when not set.
--log-file-level string Set the file log level. Options are: DEBUG, INFO, WARN, ERROR. (default DEBUG)
--log-level string Set the console log level. Options are: DEBUG, INFO, WARN, ERROR. (default WARN)
--no-color Disable text output in color. (default false)
--query string JMESPath expression to filter JSON output. Requires -O json, ndjson, ndjson-typed, or ndjson-wrapped. Example: --query 'data[?enabled].name'
More information
-
pingcli mfa fido2-policies - FIDO2 Policies