Authentication Policies can be created via the Policies endpoint. When you create your policy, make sure you set its type to ACCESS_POLICY
Our Policy Postman collection contains a sample of this request, as does our API docs. For reference, here’s the curl for the sample request from our API docs to get your started