Enroll a device

post

https://api.portal.saymine.com/enroll

First enrollment and re-enroll; anonymous — the body token is the credential. 201 issued; 202 held (future policy);
401 any token failure (indistinguishable); 400 malformed; 429 per-tenant cap (T9); 503 CAS unavailable.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Request body for POST /enroll: the enrollment token credential + a PEM PKCS#10 csr.

token

string | null

The {TokenId}.{secret} enrollment credential. Validated by the service; a bad token is a 401.

csr

string | null

A PEM PKCS#10 CSR whose Subject CN is the device_id. Carries no tenant SAN (injected server-side).

deviceIdSource

string | null

Optional (T169, device-identity.md §3.2): which OS input the CSR CN deviceId was derived from — observability only, self-reported and never trusted (REQ-AISPM-033); any value tolerated, never a 400 (REQ-AISPM-064).

Headers

content-type

string

enum

Defaults to application/json-patch+json

Generated from available request content types

Allowed:

Response

200

Success