APG PayAPG Paydocs

Identity

Create auth types

POST/auth-types

Map a login-capable permission domain to the authentication type its users use.

Permissions

Required permission
oidcIdps:create

Requires the `create` action on `oidcIdps` for the supplied runtime context

Request body

This body is a tagged shape: type is always "AuthtypeCmdCreate". Send it; more variants can be added, and a caller that switches on it keeps working when they are.

Discriminated by type
type = "AuthtypeCmdCreate"
curl -X POST https://api.tst.au.apgpay.dev/auth-types \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "type": "AuthtypeCmdCreate",
  "permissionDomain": {
    "type": "AuthtypeDomainCustomer",
    "customerId": "cust_9f2Kd8QpLzXw"
  },
  "authenticationType": {
    "type": "AuthtypeMethodBuiltIn"
  }
}'

Responses

The response is a tagged shape: type is always "AuthtypeCreateRspAttributes". Switch on it; subtypes can be added, and a client that already reads it will not break.

Discriminated by type
type = "AuthtypeCreateRspAttributes"

The resource that was created.

Example
{
  "type": "AuthtypeCreateRspAttributes",
  "created": {
    "type": "AuthtypeViewAttributes",
    "authTypeId": "pdauth_9f2Kd8QpLzXw",
    "permissionDomain": {
      "type": "AuthtypeDomainCustomer",
      "customerId": "cust_9f2Kd8QpLzXw"
    },
    "authenticationType": {
      "type": "AuthtypeMethodBuiltIn"
    },
    "createdAt": "2026-08-19T04:21:07Z",
    "updatedAt": "2026-08-19T04:21:07Z"
  }
}

Error responses