Summary

This document provides a summary list of endpoints related to Conditional Access Policies in ID360.

Download Summary OpenAPI Document

End Points

GET

/protection/conditional-access-policies/{id}/user-assignment-users

GET

/protection/conditional-access-policies/{id}/user-assignment-groups

GET

/protection/conditional-access-policies/{id}/protected-devices

GET

/protection/conditional-access-policies/{id}/protected-device-groups

GET

/protection/conditional-access-policies/{id}/protected-apps

List Users Assigned to a Conditional Access Policy

Retrieve a list of users assigned to a specific conditional access policy by ID.
OAuth Scope : id360.conditional_access_policy.read,id360.conditional_access_policy.all'

Query Parameters

from

Start index for pagination.

limit

Maximum number of records to return in the response.
eg: 50

filter

Filter users based on a the provided SCIM filter query. Refer to filter section for more details
eg: name eq "Policy 01"

Request Example

headers_data = Map();
headers_data.put("Accept", "application/json");
headers_data.put("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f");
response = invokeUrl
[
url: "https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users"
type: GET
headers: headers_data
connection: <connection_name>
];
info response;

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users")
  .get()
  .addHeader("Accept", "application/json")
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

const options = {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

import http.client

conn = http.client.HTTPSConnection("id360.manageengine.com")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
    }

conn.request("GET", "/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "id360.manageengine.com",
  "port": null,
  "path": "/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users",
  "headers": {
    "Accept": "application/json",
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

curl --request GET \
  --url https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-users \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "data": [
        {
            "id": "2000000092642",
            "name": "John Doe",
            "email": "john@mydomain.com",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        },
        {
            "id": "2000000092643",
            "name": "Jane Smith",
            "email": "jane@mydomain.com",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        }
    ],
    "meta": {
        "start_index": 1,
        "limit": 100,
        "total_no_of_objects": 1
    }
}

{
    "error": {
        "code": "00000101",
        "title": "Unauthorized",
        "detail": "The OAuth token is invalid."
    }
}

{
    "error": {
        "code": "****",
        "title": "Policy Not Found",
        "detail": "The specified conditional access policy does not exist."
    }
}

{
    "error": {
        "code": "00000000",
        "title": "Internal Server Error",
        "detail": "An unexpected internal error has occurred on the server. Please try again later."
    }
}

List Groups Assigned to a Conditional Access Policy

Retrieve a list of groups assigned to a specific conditional access policy by ID.
OAuth Scope : id360.conditional_access_policy.read,id360.conditional_access_policy.all'

Query Parameters

from

Start index for pagination.

limit

Maximum number of records to return in the response.
eg: 50

filter

Filter users based on a the provided SCIM filter query. Refer to filter section for more details
eg: name eq "Policy 01"

Request Example

headers_data = Map();
headers_data.put("Accept", "application/json");
headers_data.put("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f");
response = invokeUrl
[
url: "https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups"
type: GET
headers: headers_data
connection: <connection_name>
];
info response;

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups")
  .get()
  .addHeader("Accept", "application/json")
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

const options = {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

import http.client

conn = http.client.HTTPSConnection("id360.manageengine.com")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
    }

conn.request("GET", "/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "id360.manageengine.com",
  "port": null,
  "path": "/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups",
  "headers": {
    "Accept": "application/json",
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

curl --request GET \
  --url https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/user-assignment-groups \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "data": [
        {
            "id": "2000000092616",
            "name": "Admins",
            "type": "static",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        },
        {
            "id": "2000000092617",
            "name": "Users",
            "type": "dynamic",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        }
    ],
    "meta": {
        "start_index": 1,
        "limit": 100,
        "total_no_of_objects": 1
    }
}

{
    "error": {
        "code": "00000101",
        "title": "Unauthorized",
        "detail": "The OAuth token is invalid."
    }
}

{
    "error": {
        "code": "****",
        "title": "Policy Not Found",
        "detail": "The specified conditional access policy does not exist."
    }
}

{
    "error": {
        "code": "00000000",
        "title": "Internal Server Error",
        "detail": "An unexpected internal error has occurred on the server. Please try again later."
    }
}

List Device Assignment Devices for a Conditional Access Policy

Retrieve a list of devices assigned to a specific conditional access policy device assignment by ID.
OAuth Scope : id360.conditional_access_policy.read,id360.conditional_access_policy.all'

Query Parameters

from

Start index for pagination.

limit

Maximum number of records to return in the response.
eg: 50

filter

Filter users based on a the provided SCIM filter query. Refer to filter section for more details
eg: name eq "Policy 01"

Request Example

headers_data = Map();
headers_data.put("Accept", "application/json");
headers_data.put("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f");
response = invokeUrl
[
url: "https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-devices"
type: GET
headers: headers_data
connection: <connection_name>
];
info response;

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-devices")
  .get()
  .addHeader("Accept", "application/json")
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

const options = {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-devices', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

import http.client

conn = http.client.HTTPSConnection("id360.manageengine.com")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
    }

conn.request("GET", "/api/v1/protection/conditional-access-policies/2000000000001/protected-devices", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "id360.manageengine.com",
  "port": null,
  "path": "/api/v1/protection/conditional-access-policies/2000000000001/protected-devices",
  "headers": {
    "Accept": "application/json",
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

curl --request GET \
  --url https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-devices \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "data": [
        {
            "id": "2000000092642",
            "name": "Device 01",
            "join_type": "Id360 Joined",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            },
            "agent_status": "Active"
        },
        {
            "id": "2000000092643",
            "name": "Device 02",
            "join_type": "Entra Joined",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            },
            "agent_status": "Inactive"
        }
    ],
    "meta": {
        "start_index": 1,
        "limit": 100,
        "total_no_of_objects": 1
    }
}

{
    "error": {
        "code": "00000101",
        "title": "Unauthorized",
        "detail": "The OAuth token is invalid."
    }
}

{
    "error": {
        "code": "****",
        "title": "Policy Not Found",
        "detail": "The specified conditional access policy does not exist."
    }
}

{
    "error": {
        "code": "00000000",
        "title": "Internal Server Error",
        "detail": "An unexpected internal error has occurred on the server. Please try again later."
    }
}

List Device Assignment Groups for a Conditional Access Policy

Retrieve a list of groups assigned to a specific conditional access policy device assignment by ID.
OAuth Scope : id360.conditional_access_policy.read,id360.conditional_access_policy.all'

Query Parameters

from

Start index for pagination.

limit

Maximum number of records to return in the response.
eg: 50

filter

Filter users based on a the provided SCIM filter query. Refer to filter section for more details
eg: name eq "Policy 01"

Request Example

headers_data = Map();
headers_data.put("Accept", "application/json");
headers_data.put("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f");
response = invokeUrl
[
url: "https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups"
type: GET
headers: headers_data
connection: <connection_name>
];
info response;

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups")
  .get()
  .addHeader("Accept", "application/json")
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

const options = {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

import http.client

conn = http.client.HTTPSConnection("id360.manageengine.com")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
    }

conn.request("GET", "/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "id360.manageengine.com",
  "port": null,
  "path": "/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups",
  "headers": {
    "Accept": "application/json",
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

curl --request GET \
  --url https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-device-groups \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "data": [
        {
            "id": "2000000092616",
            "name": "Admins",
            "type": "static",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        },
        {
            "id": "2000000092617",
            "name": "Users",
            "type": "dynamic",
            "primary_source": {
                "id": "2000000072637",
                "name": "Berge-Corp",
                "application_service": {
                    "id": "2000000018007",
                    "display_name": "Universal Directory",
                    "name": "ZOHO_DIRECTORY",
                    "logo": "universal-directory"
                }
            }
        }
    ],
    "meta": {
        "start_index": 1,
        "limit": 100,
        "total_no_of_objects": 1
    }
}

{
    "error": {
        "code": "00000101",
        "title": "Unauthorized",
        "detail": "The OAuth token is invalid."
    }
}

{
    "error": {
        "code": "****",
        "title": "Policy Not Found",
        "detail": "The specified conditional access policy does not exist."
    }
}

{
    "error": {
        "code": "00000000",
        "title": "Internal Server Error",
        "detail": "An unexpected internal error has occurred on the server. Please try again later."
    }
}

List Apps Assignment for a Conditional Access Policy

Retrieve a list of applications assigned to a specific conditional access policy by ID.
OAuth Scope : id360.conditional_access_policy.read,id360.conditional_access_policy.all'

Query Parameters

from

Start index for pagination.

limit

Maximum number of records to return in the response.
eg: 50

filter

Filter users based on a the provided SCIM filter query. Refer to filter section for more details
eg: name eq "Policy 01"

Request Example

headers_data = Map();
headers_data.put("Accept", "application/json");
headers_data.put("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f");
response = invokeUrl
[
url: "https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-apps"
type: GET
headers: headers_data
connection: <connection_name>
];
info response;

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-apps")
  .get()
  .addHeader("Accept", "application/json")
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

const options = {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-apps', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

import http.client

conn = http.client.HTTPSConnection("id360.manageengine.com")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
    }

conn.request("GET", "/api/v1/protection/conditional-access-policies/2000000000001/protected-apps", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "id360.manageengine.com",
  "port": null,
  "path": "/api/v1/protection/conditional-access-policies/2000000000001/protected-apps",
  "headers": {
    "Accept": "application/json",
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

curl --request GET \
  --url https://id360.manageengine.com/api/v1/protection/conditional-access-policies/2000000000001/protected-apps \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "data": [
        {
            "id": "2000000092642",
            "name": "Universal Directory",
            "application_service": {
                "id": "2000000018007",
                "display_name": "AD Directory",
                "name": "AD_DIRECTORY",
                "logo": "ad-directory"
            }
        },
        {
            "id": "2000000092643",
            "name": "Salesforce",
            "application_service": {
                "id": "2000000018007",
                "display_name": "Azure Directory",
                "name": "AZURE_DIRECTORY",
                "logo": "azure-directory"
            }
        }
    ],
    "meta": {
        "start_index": 1,
        "limit": 100,
        "total_no_of_objects": 1
    }
}

{
    "error": {
        "code": "00000101",
        "title": "Unauthorized",
        "detail": "The OAuth token is invalid."
    }
}

{
    "error": {
        "code": "****",
        "title": "Policy Not Found",
        "detail": "The specified conditional access policy does not exist."
    }
}

{
    "error": {
        "code": "00000000",
        "title": "Internal Server Error",
        "detail": "An unexpected internal error has occurred on the server. Please try again later."
    }
}