Authentication¶

Authentication Settings¶

class illumio.authentication.AuthenticationSettings[source]¶

Represents authentication settings in the PCE.

Global singleton object. Supports GET and PUT only.

LDAP Configuration¶

class illumio.authentication.LDAPConfig[source]¶

Represents an LDAP configuration in the PCE.

Field names follow the current PCE API. The base_dn, user_dn, password, request_timeout, tls_enabled, authentication_type, and bind_type fields are retained as deprecated aliases for backwards compatibility; prefer user_base_distinguished_name, bind_distinguished_name, bind_password, request_timeout_seconds, insecure_disable_tls_certificate_verification, and authentication_method.

Note that bind_password is write-only: the PCE accepts it on create and update but never returns it; is_bind_password_set indicates whether one is configured.

SAML Configuration¶

class illumio.authentication.SAMLConfig[source]¶

Represents a SAML configuration in the PCE.

The issuer_url, sso_url, slo_url, certificate, and pce_fqdn fields are retained as deprecated aliases; prefer issuer, idp_sso_target_url, idp_slo_target_url, idp_cert, and cluster_fqdn.

Password Policy¶

class illumio.authentication.PasswordPolicy[source]¶

Represents the password policy settings in the PCE.

require_type_count and min_characters_for_change_of_password are retained as deprecated aliases; prefer the require_type_* booleans and min_changed_characters.