Secret questions and answers#

Use the the following Secret questions and answers resource operations to add and manage confidential information on an account that Rackspace Support can use for account verification.

Warning

DEPRECATED: Secret question and answer has been deprecated. However, these operations are still listed as a reference for legacy customers. This functionality has been replaced by the Support PIN.

Note

Some of the functionality described in this section is provided by the OS-KSADM and RAX-KSQA extensions to the core Identity API.

Add a secret question#

POST /v2.0/users/{userId}/RAX-AUTH/secretqas

Creates a secret question that can be added to user accounts.

The Identity service provides a list of security questions that can be used to verify account access. Administrators and users can add one of these questions to a user account with a unique answer that can be used to confirm identity before granting access to the account or account information. Users can only add a security question to their own account.

If the account already has a secret question and answer, this operation replaces the existing information with the values specified in the request body.

This table shows the possible response codes for this operation:

Response Code

Name

Description

200

The request succeeded.

400

Bad Request

The request is missing one or more elements, or the values of some elements are invalid.

401

Unauthorized

You are not authorized to complete this operation. This error can occur if the request is submitted with an invalid authentication token.

403

Forbidden

The request was valid, but the server is refusing to respond because you do not have permission to access the requested resource. Submit a request to your account administrator to determine how to gain access.

405

Invalid Method

The method specified in the request is not valid for the resource identified in the request URI.

409

Conflict

The request could not be completed due to a conflict with the current state of the resource.

413

Over Limit

The number of items returned is above the allowed limit.

415

Bad Media Type

Bad media type. This may result if the wrong media type is used in the API request. Check the content-type and accept headers included in the request.

503

Service Fault

Service is not available.

Request#

This table shows the header parameter for the request:

Name

Type

Description

X-Auth-Token

Header String (Required)

A valid authentication token.

{userId}

URI String (Required)

A user ID assigned by system when user is added.

This table shows the body parameters for the request:

Name

Type

Description

id

String (Required)

The ID of the secret question to add to the account.

answer

String (Required)

The answer that the user can provide to verify an account.

Example: Create a secret question request: XML

<?xml version="1.0" encoding="UTF-8"?>
<secretqa answer="Himalayas" id="1"
 xmlns="http://docs.rackspace.com/identity/api/ext/RAX-AUTH/v1.0"
 xmlns:atom="http://www.w3.org/2005/Atom"
 xmlns:identity="http://docs.openstack.org/identity/api/v2.0"/>

Example: Create a secret question request: JSON

{
"RAX-AUTH:secretqa":
  {
    "id": "1",
    "answer": "Himalayas",
  }
}

Response#

This example shows the response:

Example: Create a secret question HTTP response header

POST /v2.0/users/266d3c8982534378bf88f64db2c916da/RAX-AUTH/secretqas HTTP/1.1
Host: staging.identity-internal.api.rackspacecloud.com
X-Auth-Token: 0f6e9f63600142f0a970911583522217

Get questions#

GET /v2.0/RAX-AUTH/secretqa/questions

Returns a list of secret questions that can be added to user accounts.

The list includes secret questions and associated IDs required to manage questions by using the Identity service API. questions.

This table shows the possible response codes for this operation:

Response Code

Name

Description

200

OK

The request succeeded.

400

Bad Request

The request is missing one or more elements, or the values of some elements are invalid.

401

Unauthorized

You are not authorized to complete this operation. This error can occur if the request is submitted with an invalid authentication token.

403

Forbidden

The request was valid, but the server is refusing to respond because you do not have permission to access the requested resource. Submit a request to your account administrator to determine how to gain access.

404

Not Found

The requested resource was not found.

405

Invalid Method

The method specified in the request is not valid for the resource identified in the request URI.

413

Over Limit

The number of items returned is above the allowed limit.

503

Service Fault

Service is not available.

Request#

This table shows the header parameters for the request:

Name

Type

Description

X-Auth-Token

Header String (Required)

A valid admin authentication token.

This operation does not accept a request body.

Response#

Example: Get questions response: XML

<?xml version="1.0" encoding="UTF-8"?>
<rax-auth:questions xmlns:atom="http://www.w3.org/2005/Atom" \
     xmlns:rax-auth="http://docs.rackspace.com/identity/api/ext/RAX-AUTH/v1.0" \
     xmlns="http://docs.openstack.org/identity/api/v2.0" \
     xmlns:ns4="http://docs.rackspace.com/identity/api/ext/RAX-KSGRP/v1.0" \
     xmlns:rax-ksqa="http://docs.rackspace.com/identity/api/ext/RAX-KSQA/v1.0" \
     xmlns:os-ksadm="http://docs.openstack.org/identity/api/ext/OS-KSADM/v1.0" \
     xmlns:rax-kskey="http://docs.rackspace.com/identity/api/ext/RAX-KSKEY/v1.0" \
     xmlns:os-ksec2="http://docs.openstack.org/identity/api/ext/OS-KSEC2/v1.0">
     <rax-auth:question id="6" question="What is your pass phrase?"/>
     <rax-auth:question id="5" question="Who let the dogs out?"/>
     <rax-auth:question id="4" question="What is your favorite color?"/>
     <rax-auth:question id="3" question="What is your favorite book?"/>
     <rax-auth:question id="2" question="Where is the best place to live?"/>
     <rax-auth:question id="1" question="What is the location of your dream vacation?"/>
     <rax-auth:question id="1017" question="What's your fathers name?"/>
</rax-auth:questions>

Example: Get questions response: JSON

{
  "RAX-AUTH:questions": [
    {
            "id": "6",
            "question": "What is your pass phrase?"
        },
        {
            "id": "5",
            "question": "Who let the dogs out?"
        },
        {
            "id": "4",
            "question": "What is your favorite color?"
        },
        {
            "id": "3",
            "question": "What is your favorite book?"
        },
        {
            "id": "2",
            "question": "Where is the best place to live?"
        },
        {
            "id": "1",
            "question": "What is the location of your dream vacation?"
        }
  ]
}