Approve the upstream origin of one of the workspace's gateways and start its setup
Signed account session, current workspace ADMIN or OWNER and verified email; same-site JSON is mandatory. Acts on the gateway deployment_id names, else the primary. Records the consent and queues provisioning; ownership proof, keys and readiness follow in the background. An explicit id the workspace does not hold is 404 GATEWAY_NOT_FOUND.
Authorization
AccountSessionCookie The signed HttpOnly account session the web app holds after sign-in (also accepted as a Bearer acct_ token).
In: cookie
Query Parameters
One of the current workspace's gateways; omitted, the workspace's primary. The organization always comes from the session, never from a parameter.
uuidRequest Body
application/json
length <= 2048Response Body
application/json
curl -X POST "https://example.com/v1/public/account/workspace/deployments/activate" \ -H "Content-Type: application/json" \ -d '{ "upstream_origin": "https://api.acme.example", "accept_terms": true }'{ "deployment": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "tenant_label": "string", "tenant_host": "string", "gateway_url": "string", "status": "reserved", "upstream_origin": "string", "runtime_verified": true }, "deployments": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "tenant_host": "acme.decionisedge.com", "is_primary": true, "status": "queued", "running_mode": "SHADOW" } ], "deployment_limit": 1, "credentials": [ {} ], "gateway_token": { "header": "AgentSafe-Gateway-Token", "issued": true, "revealable": true, "sent": true, "sent_at": "2019-08-24T14:15:22Z", "pending_at": "2019-08-24T14:15:22Z" }, "enforcement": {}, "networking": {}, "activation": {}}Reserve the workspace's first gateway domain, or an additional one POST
Signed account session, current workspace ADMIN or OWNER; same-site JSON is mandatory. A body with an optional company_name reserves the workspace's primary gateway, or returns it when one exists. A body with additional:true and tenant_label reserves a further gateway at exactly <tenant_label>.decionisedge.com, needs a verified email, and fits within the capacity an operator granted the workspace; repeating it returns the same gateway. The answer is the reserved gateway's overview. Reservation grants no access to a fleet tenant already serving that label.
Turn enforcement on or off for one of the workspace's gateways POST
Signed account session, current workspace ADMIN or OWNER and verified email; same-site JSON is mandatory. Acts on the gateway deployment_id names, else the primary; every gateway has its own mode, upstream credential and named policy. The upstream credential is sealed at once and never logged, echoed or returned. An explicit id the workspace does not hold is 404 GATEWAY_NOT_FOUND.