This step associates a sign-on policy action with the new sign-on policy you created in Step 5. The POST /environments/{{envID}}/signOnPolicies/{{policyID}}/actions operation creates the sign-on policy action resource, which is associated with the sign-on policy ({{policyID}}) specified in the request URL.

This action is a second MULTI_FACTOR_AUTHENTICATION sign-on policy action type to prompt for a one-time passcode verification through the user’s email device.

For a sign-on action that supports a multi-factor authentication action, the sign-on policy action must enable at least one MFA device type. This action enables the email device types and sets the sms device type to false.

In this sample, the priority property is set to 10, which is not the highest ranking. Setting the priority to a higher number designates that this action will follow the first MFA action.