---
title: "Configure Active Directory Agent authentication settings"
method: PUT
path: "/agent-authentication/ad"
tags: ["AgentAuthentication"]
---

# Configure Active Directory Agent authentication settings

`PUT /agent-authentication/ad`

## Request

- Base URL: `https://localhost:8446/api/v2`
- URL: `https://localhost:8446/api/v2/agent-authentication/ad`
- Auth: API key in header `Authorization`

Configure Active Directory (SPNEGO) Agent authentication settings. Returns the updated AD Agent authentication settings. See get Active Directory Agent authentication settings for the response details. When enabled is true , all Active Directory-specific fields are required. To disable, send { "enabled": false } without any other fields; the stored AD settings are reset to defaults.

## Request body

- object
  - `enabled` boolean, required: Enable/disable Active Directory (SPNEGO) Agent authentication
  - `allow_fallback_to_default` boolean: Allow fallback to default authentication when AD authentication fails. Required when enabled is true
  - `token_ttl` number: Token time-to-live in milliseconds (positive integer, maximum 31557600000 ms / 1 year). Required when enabled is true
  - `require_reauthorization` boolean: When enabled, Agents will be required to re-authorize after any AD configuration change. Required when enabled is true

## Response `200`

Successful response

## Other responses

- `default`: Error response. Depending on the error, either a 4xx or 5xx response status is returned.

---

[API](https://skmtc.dev/resilio/apis/resilio-api.md) - [All operations](https://skmtc.dev/resilio/apis/resilio-api/llms.txt) - [OpenAPI document](https://skmtc.dev/resilio/apis/resilio-api/revisions/ca39130a395e?raw)