Gravitee

Gravitee domain API

The domain API from Gravitee — 120 operation(s) for domain.

GitHub OpenAPI

Operations 14

GET /organizations/{organizationId}/environments/{environmentId}/domains List security domains for an environment #
POST /organizations/{organizationId}/environments/{environmentId}/domains Create a security domain. #
GET /organizations/{organizationId}/environments/{environmentId}/domains/_hrid/{hrid} Get a security domain by hrid #
GET /organizations/{organizationId}/environments/{environmentId}/domains/{domain} Get a security domain #
PUT /organizations/{organizationId}/environments/{environmentId}/domains/{domain} Update the security domain #
DELETE /organizations/{organizationId}/environments/{environmentId}/domains/{domain} Delete the security domain #
PATCH /organizations/{organizationId}/environments/{environmentId}/domains/{domain} Patch the security domain #
GET /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/analytics Find domain analytics #
PUT /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/certificate-settings Update the security domain certificate settings #
GET /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/entrypoints Get the matching gateway entrypoint of the domain #
GET /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members List members for a security domain #
POST /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members Add or update an security domain member #
GET /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members/permissions List domain member's permissions #
DELETE /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members/{member} Remove a membership #

Documentation

📖
Documentation
https://documentation.gravitee.io/apim
📖
GettingStarted
https://documentation.gravitee.io/apim/getting-started
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/rate-limits/gravitee-rate-limits.yml
📖
Documentation
https://documentation.gravitee.io/am

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/openapi/gravitee-domain-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/gravitee-io/gravitee-api-management
📦
GitHubRepository
https://github.com/gravitee-io/gravitee-access-management

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/json-schema/gravitee-api-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/json-schema/gravitee-plan-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/json-schema/gravitee-domain-schema.json

Other Resources

🔗
ChangeLog
https://documentation.gravitee.io/apim/release-information/changelog
🔗
License
https://github.com/gravitee-io/gravitee-api-management/blob/master/LICENSE.txt
🔗
SDKs
https://github.com/gravitee-io/gravitee-clients-sdk
🔗
SDKs
https://github.com/gravitee-io/terraform-provider-apim
🔗
CLI
https://github.com/gravitee-io/graviteeio-cli
🔗
KubernetesOperator
https://github.com/gravitee-io/gravitee-kubernetes-operator
🔗
HelmChart
https://github.com/gravitee-io/helm-charts
🔗
DockerImage
https://hub.docker.com/r/graviteeio/apim-gateway
🔗
JSONLDContext
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/json-ld/gravitee-context.jsonld
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_apidefinitions.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_apiv4definitions.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_apiresources.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_applications.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_subscriptions.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_managementcontexts.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_sharedpolicygroups.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_groups.yaml
🔗
KubernetesCRD
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/crd/gravitee.io_notifications.yaml
🔗
Plans
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/plans/gravitee-plans-pricing.yml
🔗
FinOps
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/finops/gravitee-finops.yml
🔗
GraphQL
https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/graphql/gravitee-graphql.md
🔗
Reference
https://documentation.gravitee.io/am/reference/am-api-reference
🔗
ChangeLog
https://documentation.gravitee.io/am/releases-and-changelog/release-notes
🔗
License
https://github.com/gravitee-io/gravitee-access-management/blob/master/LICENSE
🔗
SDKs
https://github.com/gravitee-io/gravitee-access-management/tree/master/gravitee-am-management-api-sdk-java
🔗
HelmChart
https://github.com/gravitee-io/helm-charts/tree/master/helm/gravitee-am
🔗
DockerImage
https://hub.docker.com/r/graviteeio/am-gateway

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/gravitee-domain-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

gravitee-domain-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Gravitee.io - Access Management Domain API
  version: 4.12.0-alpha.3
servers:
- url: /management
security:
- gravitee-auth: []
tags:
- name: domain
paths:
  /organizations/{organizationId}/environments/{environmentId}/domains:
    get:
      tags:
      - domain
      summary: List security domains for an environment
      description: List all the security domains accessible to the current user. User must have DOMAIN[LIST] permission on the specified environment or organization AND either DOMAIN[READ] permission on each security domain or DOMAIN[READ] permission on the specified environment or DOMAIN[READ] permission on the specified organization.Each returned domain is filtered and contains only basic information such as id, name and description and isEnabled.
      operationId: listDomains
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: page
        in: query
        schema:
          type: integer
          format: int32
          default: 0
      - name: size
        in: query
        schema:
          type: integer
          format: int32
          default: 50
      - name: q
        in: query
        schema:
          type: string
      responses:
        '200':
          description: List accessible security domains for current user
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DomainPage'
        '500':
          description: Internal server error
    post:
      tags:
      - domain
      summary: Create a security domain.
      description: Create a security domain. User must have DOMAIN[CREATE] permission on the specified environment or DOMAIN[CREATE] permission on the specified organization
      operationId: createDomain
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NewDomain'
        required: true
      responses:
        '201':
          description: Domain successfully created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/_hrid/{hrid}:
    get:
      tags:
      - domain
      summary: Get a security domain by hrid
      description: User must have the DOMAIN[READ] permission on the specified domain, environment or organization. Domain will be filtered according to permissions (READ on DOMAIN_USER_ACCOUNT, DOMAIN_IDENTITY_PROVIDER, DOMAIN_FORM, DOMAIN_LOGIN_SETTINGS, DOMAIN_DCR, DOMAIN_SCIM, DOMAIN_SETTINGS)
      operationId: findDomainByHrid
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: hrid
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Domain
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}:
    get:
      tags:
      - domain
      summary: Get a security domain
      description: User must have the DOMAIN[READ] permission on the specified domain, environment or organization. Domain will be filtered according to permissions (READ on DOMAIN_USER_ACCOUNT, DOMAIN_IDENTITY_PROVIDER, DOMAIN_FORM, DOMAIN_LOGIN_SETTINGS, DOMAIN_DCR, DOMAIN_SCIM, DOMAIN_SETTINGS)
      operationId: findDomain
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Domain
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
    put:
      tags:
      - domain
      summary: Update the security domain
      description: User must have the DOMAIN_SETTINGS[UPDATE] permission on the specified domain or DOMAIN_SETTINGS[UPDATE] permission on the specified environment or DOMAIN_SETTINGS[UPDATE] permission on the specified organization.
      operationId: updateDomain
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PatchDomain'
        required: true
      responses:
        '200':
          description: Domain successfully updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
    delete:
      tags:
      - domain
      summary: Delete the security domain
      description: User must have the DOMAIN[DELETE] permission on the specified domain or DOMAIN[DELETE] permission on the specified environment or DOMAIN[DELETE] permission on the specified organization.
      operationId: deleteDomain
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Domain successfully deleted
        '500':
          description: Internal server error
    patch:
      tags:
      - domain
      summary: Patch the security domain
      description: User must have the DOMAIN_SETTINGS[UPDATE] permission on the specified domain or DOMAIN_SETTINGS[UPDATE] permission on the specified environment or DOMAIN_SETTINGS[UPDATE] permission on the specified organization.
      operationId: patchDomain
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PatchDomain'
        required: true
      responses:
        '200':
          description: Domain successfully patched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/analytics:
    get:
      tags:
      - domain
      summary: Find domain analytics
      description: User must have DOMAIN_ANALYTICS[READ] permission on the specified domain or DOMAIN_ANALYTICS[READ] permission on the specified environment or DOMAIN_ANALYTICS[READ] permission on the specified organization
      operationId: findDomainAnalytics
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      - name: from
        in: query
        description: Used to define the start date of the time window to query
        schema:
          type: integer
          format: int64
      - name: to
        in: query
        description: Used to define the end date of the time window to query
        schema:
          type: integer
          format: int64
      - name: interval
        in: query
        description: The time interval when getting histogram data
        schema:
          type: integer
          format: int64
      - name: size
        in: query
        description: The number of data to retrieve
        schema:
          type: integer
          format: int32
      - name: type
        in: query
        description: The type of data to retrieve (group_by, date_histo, count)
        required: true
        schema:
          $ref: '#/components/schemas/AnalyticsTypeParam'
      - name: field
        in: query
        schema:
          type: string
      responses:
        '200':
          description: Analytics successfully fetched
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/certificate-settings:
    put:
      tags:
      - domain
      summary: Update the security domain certificate settings
      description: User must have the DOMAIN_SETTINGS[UPDATE] permission on the specified domain or DOMAIN_SETTINGS[UPDATE] permission on the specified environment or DOMAIN_SETTINGS[UPDATE] permission on the specified organization. This endpoint updates only certificate settings without triggering a full domain reload.
      operationId: updateDomainCertificateSettings
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificateSettings'
        required: true
      responses:
        '200':
          description: Certificate settings successfully updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Domain'
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/entrypoints:
    get:
      tags:
      - domain
      summary: Get the matching gateway entrypoint of the domain
      description: User must have the DOMAIN[READ] permission on the specified domain, environment or organization. Domain will be filtered according to permissions (READ on DOMAIN_USER_ACCOUNT, DOMAIN_IDENTITY_PROVIDER, DOMAIN_FORM, DOMAIN_LOGIN_SETTINGS, DOMAIN_DCR, DOMAIN_SCIM, DOMAIN_SETTINGS)
      operationId: getDomainEntrypoints
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Domain entrypoint
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Entrypoint'
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members:
    get:
      tags:
      - domain
      summary: List members for a security domain
      description: User must have the DOMAIN_MEMBER[LIST] permission on the specified domain or DOMAIN_MEMBER[LIST] permission on the specified environment or DOMAIN_MEMBER[LIST] permission on the specified organization
      operationId: listMembers
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: List members for a security domain
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MembershipListItem'
        '500':
          description: Internal server error
    post:
      tags:
      - domain
      summary: Add or update an security domain member
      description: User must have the DOMAIN_MEMBER[CREATE] permission on the specified domain or DOMAIN_MEMBER[CREATE] permission on the specified environment or DOMAIN_MEMBER[CREATE] permission on the specified organization
      operationId: addOrUpdateMember_1
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NewMembership'
        required: true
      responses:
        '201':
          description: Member has been added or updated successfully
        '400':
          description: Membership parameter is not valid
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members/permissions:
    get:
      tags:
      - domain
      summary: List domain member's permissions
      description: User must have DOMAIN[READ] permission on the specified domain or DOMAIN[READ] permission on the specified environment or DOMAIN[READ] permission on the specified organization
      operationId: getDomainMemberPermissions
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Domain member's permissions
          content:
            application/json:
              schema:
                type: string
        '500':
          description: Internal server error
  /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/members/{member}:
    delete:
      tags:
      - domain
      summary: Remove a membership
      description: User must have the DOMAIN_MEMBER[DELETE] permission on the specified domain or DOMAIN_MEMBER[DELETE] permission on the specified environment or DOMAIN_MEMBER[DELETE] permission on the specified organization
      operationId: removeDomainMember
      parameters:
      - name: organizationId
        in: path
        required: true
        schema:
          type: string
      - name: environmentId
        in: path
        required: true
        schema:
          type: string
      - name: domain
        in: path
        required: true
        schema:
          type: string
      - name: member
        in: path
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Membership successfully deleted
        '500':
          description: Internal server error
components:
  schemas:
    UMASettings:
      type: object
      properties:
        enabled:
          type: boolean
    SecretExpirationSettings:
      type: object
      properties:
        enabled:
          type: boolean
        expiryTimeSeconds:
          type: integer
          format: int64
    PatchOIDCSettings:
      type: object
      properties:
        cibaSettings:
          $ref: '#/components/schemas/PatchCIBASettings'
        cimdSettings:
          $ref: '#/components/schemas/PatchCIMDSettings'
        clientRegistrationSettings:
          $ref: '#/components/schemas/PatchClientRegistrationSettings'
        postLogoutRedirectUris:
          type: array
          items:
            type: string
        redirectUriStrictMatching:
          type: boolean
        requestUris:
          type: array
          items:
            type: string
        requiredPermissions:
          uniqueItems: true
          type: array
          items:
            type: string
            enum:
            - ORGANIZATION
            - ORGANIZATION_SETTINGS
            - ORGANIZATION_IDENTITY_PROVIDER
            - ORGANIZATION_AUDIT
            - ORGANIZATION_REPORTER
            - ORGANIZATION_SCOPE
            - ORGANIZATION_USER
            - ORGANIZATION_GROUP
            - ORGANIZATION_ROLE
            - ORGANIZATION_TAG
            - ORGANIZATION_ENTRYPOINT
            - ORGANIZATION_FORM
            - ORGANIZATION_MEMBER
            - ENVIRONMENT
            - DATA_PLANE
            - DOMAIN
            - DOMAIN_SETTINGS
            - DOMAIN_FORM
            - DOMAIN_EMAIL_TEMPLATE
            - DOMAIN_EXTENSION_POINT
            - DOMAIN_IDENTITY_PROVIDER
            - DOMAIN_AUTHORIZATION_ENGINE
            - DOMAIN_AUDIT
            - DOMAIN_CERTIFICATE
            - DOMAIN_USER
            - DOMAIN_USER_DEVICE
            - DOMAIN_GROUP
            - DOMAIN_ROLE
            - DOMAIN_SCIM
            - DOMAIN_SCOPE
            - DOMAIN_EXTENSION_GRANT
            - DOMAIN_OPENID
            - DOMAIN_SAML
            - DOMAIN_UMA
            - DOMAIN_UMA_SCOPE
            - DOMAIN_REPORTER
            - DOMAIN_MEMBER
            - DOMAIN_ANALYTICS
            - DOMAIN_FACTOR
            - DOMAIN_RESOURCE
            - DOMAIN_FLOW
            - DOMAIN_ALERT
            - DOMAIN_ALERT_NOTIFIER
            - DOMAIN_BOT_DETECTION
            - DOMAIN_DEVICE_IDENTIFIER
            - DOMAIN_AUTHDEVICE_NOTIFIER
            - DOMAIN_I18N_DICTIONARY
            - DOMAIN_THEME
            - APPLICATION
            - APPLICATION_SETTINGS
            - APPLICATION_IDENTITY_PROVIDER
            - APPLICATION_FORM
            - APPLICATION_EMAIL_TEMPLATE
            - APPLICATION_OPENID
            - APPLICATION_SAML
            - APPLICATION_CERTIFICATE
            - APPLICATION_MEMBER
            - APPLICATION_FACTOR
            - APPLICATION_RESOURCE
            - APPLICATION_ANALYTICS
            - APPLICATION_FLOW
            - LICENSE_NOTIFICATION
            - PROTECTED_RESOURCE
            - PROTECTED_RESOURCE_MEMBER
            - PROTECTED_RESOURCE_SETTINGS
            - PROTECTED_RESOURCE_OAUTH
            - PROTECTED_RESOURCE_CERTIFICATE
            - INSTALLATION
        securityProfileSettings:
          $ref: '#/components/schemas/PatchSecurityProfileSettings'
    ResetPasswordSettings:
      type: object
      properties:
        oldPasswordRequired:
          type: boolean
        tokenAge:
          type: integer
          format: int32
    PasswordSettings:
      type: object
      properties:
        excludePasswordsInDictionary:
          type: boolean
        excludeUserProfileInfoInPassword:
          type: boolean
        expiryDuration:
          type: integer
          format: int32
        includeNumbers:
          type: boolean
        includeSpecialCharacters:
          type: boolean
        inherited:
          type: boolean
        lettersInMixedCase:
          type: boolean
        maxConsecutiveLetters:
          type: integer
          format: int32
        maxLength:
          type: integer
          format: int32
        minLength:
          type: integer
          format: int32
        oldPasswords:
          type: integer
          format: int32
        passwordHistoryEnabled:
          type: boolean
    FormField:
      type: object
      properties:
        key:
          type: string
        label:
          type: string
        type:
          type: string
    VirtualHost:
      type: object
      properties:
        host:
          type: string
        overrideEntrypoint:
          type: boolean
        path:
          type: string
    UserBindingCriterion:
      type: object
      properties:
        attribute:
          type: string
        expression:
          type: string
    ClientRegistrationSettings:
      type: object
      properties:
        allowHttpSchemeRedirectUri:
          type: boolean
        allowLocalhostRedirectUri:
          type: boolean
        allowRedirectUriParamsExpressionLanguage:
          type: boolean
        allowWildCardRedirectUri:
          type: boolean
        allowedScopes:
          type: array
          items:
            type: string
        allowedScopesEnabled:
          type: boolean
        clientTemplateEnabled:
          type: boolean
        defaultScopes:
          type: array
          items:
            type: string
        dynamicClientRegistrationEnabled:
          type: boolean
        openDynamicClientRegistrationEnabled:
          type: boolean
    LoginSettings:
      type: object
      properties:
        certificateBasedAuthEnabled:
          type: boolean
        certificateBasedAuthUrl:
          type: string
        enforcePasswordPolicyEnabled:
          type: boolean
        forgotPasswordEnabled:
          type: boolean
        hideForm:
          type: boolean
        identifierFirstEnabled:
          type: boolean
        inherited:
          type: boolean
        magicLinkAuthEnabled:
          type: boolean
        passwordlessDeviceNamingEnabled:
          type: boolean
        passwordlessEnabled:
          type: boolean
        passwordlessEnforcePasswordEnabled:
          type: boolean
        passwordlessEnforcePasswordMaxAge:
          type: integer
          format: int32
        passwordlessRememberDeviceEnabled:
          type: boolean
        registerEnabled:
          type: boolean
        rememberMeEnabled:
          type: boolean
        resetPasswordOnExpiration:
          type: boolean
    OIDCSettings:
      type: object
      properties:
        cibaSettings:
          $ref: '#/components/schemas/CIBASettings'
        cimdSettings:
          $ref: '#/components/schemas/CIMDSettings'
        clientRegistrationSettings:
          $ref: '#/components/schemas/ClientRegistrationSettings'
        postLogoutRedirectUris:
          type: array
          items:
            type: string
        redirectUriStrictMatching:
          type: boolean
        requestUris:
          type: array
          items:
            type: string
        securityProfileSettings:
          $ref: '#/components/schemas/SecurityProfileSettings'
    CIBASettingNotifier:
      type: object
      properties:
        id:
          type: string
    PatchClientRegistrationSettings:
      type: object
      properties:
        allowHttpSchemeRedirectUri:
          type: boolean
        allowLocalhostRedirectUri:
          type: boolean
        allowRedirectUriParamsExpressionLanguage:
          type: boolean
        allowWildCardRedirectUri:
          type: boolean
        allowedScopes:
          type: array
          items:
            type: string
        clientTemplateEnabled:
          type: boolean
          writeOnly: true
        defaultScopes:
          type: array
          items:
            type: string
        dynamicClientRegistrationEnabled:
          type: boolean
          writeOnly: true
        isAllowedScopesEnabled:
          type: boolean
        isClientTemplateEnabled:
          type: boolean
        isDynamicClientRegistrationEnabled:
          type: boolean
        isOpenDynamicClientRegistrationEnabled:
          type: boolean
        openDynamicClientRegistrationEnabled:
          type: boolean
          writeOnly: true
    PatchCIMDSettings:
      type: object
      properties:
        allowPrivateIpAddress:
          type: boolean
        allowUnsecuredHttpUri:
          type: boolean
        allowedDomains:
          type: array
          items:
            type: string
        cacheMaxEntries:
          type: integer
          format: int32
        cacheTtlSeconds:
          type: integer
          format: int32
        enabled:
          type: boolean
        fetchTimeoutMs:
          type: integer
          format: int32
        maxResponseSizeKb:
          type: integer
          format: int32
        revokeOnDocumentChange:
          type: boolean
        templateId:
          type: string
    PatchSAMLSettings:
      type: object
      properties:
        certificate:
          type: string
        enabled:
          type: boolean
        entityId:
          type: string
        requiredPermissions:
          uniqueItems: true
          type: array
          items:
            type: string
            enum:
            - ORGANIZATION
            - ORGANIZATION_SETTINGS
            - ORGANIZATION_IDENTITY_PROVIDER
            - ORGANIZATION_AUDIT
            - ORGANIZATION_REPORTER
            - ORGANIZATION_SCOPE
            - ORGANIZATION_USER
            - ORGANIZATION_GROUP
            - ORGANIZATION_ROLE
            - ORGANIZATION_TAG
            - ORGANIZATION_ENTRYPOINT
            - ORGANIZATION_FORM
            - ORGANIZATION_MEMBER
            - ENVIRONMENT
            - DATA_PLANE
            - DOMAIN
            - DOMAIN_SETTINGS
            - DOMAIN_FORM
            - DOMAIN_EMAIL_TEMPLATE
            - DOMAIN_EXTENSION_POINT
            - DOMAIN_IDENTITY_PROVIDER
            - DOMAIN_AUTHORIZATION_ENGINE
            - DOMAIN_AUDIT
            - DOMAIN_CERTIFICATE
            - DOMAIN_USER
            - DOMAIN_USER_DEVICE
            - DOMAIN_GROUP
            - DOMAIN_ROLE
            - DOMAIN_SCIM
            - DOMAIN_SCOPE
            - DOMAIN_EXTENSION_GRANT
            - DOMAIN_OPENID
            - DOMAIN_SAML
            - DOMAIN_UMA
            - DOMAIN_UMA_SCOPE
            - DOMAIN_REPORTER
            - DOMAIN_MEMBER
            - DOMAIN_ANALYTICS
            - DOMAIN_FACTOR
            - DOMAIN_RESOURCE
            - DOMAIN_FLOW
            - DOMAIN_ALERT
            - DOMAIN_ALERT_NOTIFIER
            - DOMAIN_BOT_DETECTION
            - DOMAIN_DEVICE_IDENTIFIER
            - DOMAIN_AUTHDEVICE_NOTIFIER
            - DOMAIN_I18N_DICTIONARY
            - DOMAIN_THEME
            - APPLICATION
            - APPLICATION_SETTINGS
            - APPLICATION_IDENTITY_PROVIDER
            - APPLICATION_FORM
            - APPLICATION_EMAIL_TEMPLATE
            - APPLICATION_OPENID
            - APPLICATION_SAML
            - APPLICATION_CERTIFICATE
            - APPLICATION_MEMBER
            - APPLICATION_FACTOR
            - APPLICATION_RESOURCE
            - APPLICATION_ANALYTICS
            - APPLICATION_FLOW
            - LICENSE_NOTIFICATION
            - PROTECTED_RESOURCE
            - PROTECTED_RESOURCE_MEMBER
            - PROTECTED_RESOURCE_SETTINGS
            - PROTECTED_RESOURCE_OAUTH
            - PROTECTED_RESOURCE_CERTIFICATE
            - INSTALLATION
    SCIMSettings:
      type: object
      properties:
        enabled:
          type: boolean
        idpSelectionEnabled:
          type: boolean
        idpSelectionRule:
          type: string
    CIBASettings:
      type: object
      properties:
        authReqExpiry:
          type: integer
          format: int32
        bindingMessageLength:
          type: integer
          format: int32
        deviceNotifiers:
          type: array
          items:
            $ref: '#/components/schemas/CIBASettingNotifier'
        enabled:
          type: boolean
        tokenReqInterval:
          type: integer
          format: int32
    PatchCIBASettings:
      type: object
      properties:
        authReqExpiry:
          type: integer
          format: int32
        bindingMessageLength:
          type: integer
          format: int32
        deviceNotifiers:
          type: array
          items:
            $ref: '#/components/schemas/CIBASettingNotifier'
        enabled:
          type: boolean
        tokenReqInterval:
          type: integer
          format: int32
    SecurityProfileSettings:
      type: object
      properties:
        enableFapiBrazil:
          type: boolean
        enablePlainFapi:
          type: boolean
    WebAuthnSettings:
      type: object
      properties:
        attestationConveyancePreference:
          type: string
          enum:
          - NONE
          - INDIRECT
          - DIRECT
        authenticatorAttachment:
          type: string
          enum:
          - CROSS_PLATFORM
          - PLATFORM
        certificates:
          type: object
          additionalProperties:
            type: object
        enforceAuthenticatorIntegrity:
          type: boolean
        enforceAuthenticatorIntegrityMaxAge:
          type: integer
          format: int32
        forceRegistration:
          type: boolean
        origin:
          type: string
        relyingPartyId:
          type: string
        relyingPartyName:
          type: string
        requireResidentKey:
          type: boolean
        userVerification:
          type: string
          enum:
          - REQUIRED
          - PREFERRED
          - DISCOURAGED
    SelfServiceAccountManagementSettings:
      type: object
      properties:
        enabled:
          type: boolean
        resetPassword:
          $ref: '#/components/schemas/ResetPasswordSettings'
    PatchPasswordSettings:
      type: object
      properties:
        excludePasswordsInDictionary:
          type: boolean
        excludeUserProfileInfoInPassword:
          type: boolean
        expiryDuration:
          type: integer
          format: int32
        includeNumbers:
          type: boolean
        includeSpecialCharacters:
          type: boolean
        inherited:
          type: boolean
        lettersInMixedCase:
          type: boolean
        maxConsecutiveLetters:
          type: integer
          format: int32
        maxLength:
          type: integer
          format: int32
        minLength:
          type: integer
          format: int32
        oldPasswords:
          type: integer
          format: int32
        passwordHistoryEnabled:
          type: boolean
    Membership:
      type: object
      properties:
        createdAt:
          type: string
          format: date-time
        domain:
          type: string
        fromRoleMapper:
          type: boolean
        id:
          type: string
        memberId:
          type: string
        memberType:
          type: string
          enum:
          - USER
          - GROUP
        referenceId:
          type: string
        referenceType:
          type: string
          enum:
          - PLATFORM
          - DOMAIN
          - APPLICATION
          - ORGANIZATION
          - ENVIRONMENT
          - PROTECTED_RESOURCE
        roleId:
          type: string
        updatedAt:
          type: string
          format: date-time
    TrustedIssuer:
      type: object
      properties:
        certificate:
          type: string
        issuer:
          type: string
        jwksUri:
          type: string
        keyResolutionMethod:
          type: string
          enum:
          - JWKS_URL
          - PEM
        scopeMappings:
          type: object
          additionalProperties:
            type: string
        userBindingCriteria:
          type: array
          items:
            $ref: '#/components/schemas/UserBindingCriterion'
        userBindingEnabled:
          type: boolean
    NewDomain:
      required:
      - dataPlaneId
      - name
      type: object
      properties:
        dataPlaneId:
          type: string
        description:
          type: string
        name:
          type: string
    DomainPage:
      type: object
      properties:
        currentPage:
          type: integer
          format: int32
        data:
          type: array
          items:
       

# --- truncated at 32 KB (44 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/gravitee/refs/heads/main/openapi/gravitee-domain-api-openapi.yml