DKBSignDocs

API reference

PUTRequires Bearer token

Update security settings

/api/v1/companies/{company}/security-settings

Company-admin. Partial update. Setting min_signature_level to qualified also turns on require_external_identity_verification.

Path parameters

FieldTypeDescription
company
Required
stringPath parameter company.

Query parameters

This endpoint has no query parameters.

Request body

FieldTypeDescription
mfa_enforced
booleanRequire MFA at login.
e.g. true
block_legacy_auth
booleanBlock legacy authentication paths.
e.g. false
admin_always_mfa
booleanAlways require MFA for company admins.
e.g. true
require_external_identity_verification
booleanRequire identity for qualified external signers.
e.g. false
allowed_methods
objectMap of method → bool: email, totp, webauthn, sms.
e.g. {"email":true,"totp":true,"webauthn":true,"sms":false}
grace_period_days
integerEnrollment grace period (0–365).
e.g. 7
remember_device_days
integerRemember-device window (0–365).
e.g. 30
min_signature_level
stringsimple, advanced, qualified, or null. Must be in the company’s open levels.
e.g. "advanced"

Responses

StatusMeaning
200Updated settings
401Missing or invalid Bearer token.

Request

curl
curl -X PUT 'https://api.dkbsigns.com/api/v1/companies/company/security-settings' \
  -H 'Authorization: Bearer $DKBSIGN_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{"mfa_enforced":true,"block_legacy_auth":false,"admin_always_mfa":true,"require_external_identity_verification":false,"allowed_methods":{"email":true,"totp":true,"webauthn":true,"sms":false},"grace_period_days":7,"remember_device_days":30,"min_signature_level":"advanced"}'

Response 200

json
{
  "mfa_enforced": true,
  "allowed_methods": {
    "email": true,
    "totp": true,
    "webauthn": true
  },
  "min_signature_level": "advanced"
}