User Resource
User-related dates and times use the Coordinated Universal Time (UTC) format: YYYY-MM-DDThh:mm:ss.mscZ. For example: 2016-01-21T09:20:15.990Z.
| Element | Description |
|---|---|
|
|
Date and time at which the user’s status was set to |
|
|
Notes entered about the user. |
|
|
Date and time at which the user was created. |
custom_attributes |
Provides a list of custom attribute fields (also known as custom user fields) that are available for your account. The values returned correspond to the values you provided in the Shortname field when you defined the custom user field. For more info about defining custom user fields, see Custom User Fields. |
|
|
ID of the directory (Active Directory, LDAP, for example) from which the user was created. |
|
|
Synchronized from Active Directory. |
|
|
User’s email address, which he also uses to log in to OneLogin. |
|
|
External ID that can be used to uniquely identify the user in another system. |
|
|
User’s first name. |
|
|
Group to which the user belongs. |
|
|
User’s unique ID in OneLogin. |
|
|
Number of sequential invalid login attempts the user has made that is less than or equal to the Maximum invalid login attempts value defined on the Session page in OneLogin. When this number reaches this value, the user account will be locked for the amount of time defined by the Lock effective period field on the Session page and this value will be reset to 0. |
|
|
Date and time at which an invitation to OneLogin was sent to the user. |
|
|
Date and time of the user’s last login. |
|
|
User’s last name. |
|
|
Represents a geographical, political, or cultural region. Some features may use the locale value to tailor the display of information, such as numbers, for the user based on locale-specific customs and conventions. |
|
|
Date and time at which the user’s account will be unlocked. |
|
|
ID of the user’s manager in Active Directory. |
|
|
OneLogin ID of the user’s manager. |
|
|
Synchronized from Active Directory. |
|
|
OpenID URL that can be configured in other applications that accept OpenID for sign-in. |
|
|
Date and time at which the user’s password was last changed. |
|
|
User’s phone number. |
|
|
Role IDs to which the user is assigned. |
|
|
Synchronized from Active Directory. |
state |
Represents the user’s stage in a process (such as user account approval). User state determines the possible statuses a user account can be in. States include:
|
|
|
Determines the user’s ability to log in to OneLogin. Possible values:
|
|
|
Date and time at which the user’s information was last updated. |
|
|
If the user’s directory is set to authenticate using a user name value, this is the value used to sign in. |
|
|
Synchronized from Active Directory. |
Have a Question?
Have a how-to question? Seeing a weird error? Ask us about it on StackOverflow.
Found a bug? Submit a support ticket.
Have a product idea or request? Share it with us in our Ideas Portal.
StackOverflow discussions about "[onelogin] user api"
-
A: OneLogin REST API with PowerShell's Invoke-RestMethod
Answered Sep 05 2016://api.us.onelogin.com/api/1/users/$id' ` -Headers @{ Authorization = "bearer:$token" } ` -Body ( @{ phone = "7709746046" } | ConvertTo-Json ) ` -Method Put … ":true,"code":400,"type":"bad request","message":{"description":"notes is not a valid attribute for user model","attribute":"notes"}}} The request body has been saved to $global:helpme This was super …
-
Q: AWS API credentials with OneLogin SAML and MFA
Asked Oct 30 2016We want to allow our users to retrieve a set of temporary CLI credentials for a given AWS role by signing in to OneLogin with password and MFA. We have a working solution, but it requires the user to … fully re-authenticate to OneLogin (including MFA) every 60 minutes as the AWS temporary credentials expire. I think that won't fly - our users are accustomed to permanent API credentials tied to a …
-
Q: Verify AD or LDAP crendentials via REST API
Asked Mar 28 2016and password, which we would verify against their user directory using OneLogin API I went through the API documentation for OneLogin but i have not see any method for doing that, although i can see at https://www.onelogin.com/active-directory-integration that it is a feature of OneLogin … verify user credentials), and perform a one time API integration so that users will be presented with a login form on our web application www.mywebapp.com/login, they will then enter their AD/LDAP username …
-
Q: OneLogin REST API with PowerShell's Invoke-RestMethod
Asked Sep 04 2016I'm working against the OneLogin REST API and can't seem to get any calls with a PUT method working. When I test in Postman, I can pass a raw JSON body like this: { "role_id_array … ": [ 115028 ] } to the endpoint: https://api.us.onelogin.com/api/1/users//add_roles This works just fine. However, when I attempt to do the same with PowerShell's …
-
Q: Can I use OneLogin API to generate SAML assertions in a standalone app?
Asked Aug 16 2016? OneLogin people, can you add an API credential type for calling only the SAML Assertion APIs? Or you could just make the API open. (Note that AWS's "AssumeRoleWithSAML" API doesn't require user … I want to use OneLogin to write a command-line program that takes a username/password and generates a SAML assertion that can be used to authenticate to other sites. The problem is that calling the …
Loading...