User Resource
User-related dates and times use the Coordinated Universal Time (UTC) format: YYYY-MM-DDThh:mm:ss.mscZ. For example: 2016-01-21T09:20:15.990Z.
| Element | Description |
|---|---|
|
|
Date and time at which the user’s status was set to |
|
|
Notes entered about the user. |
|
|
Date and time at which the user was created. |
custom_attributes |
Provides a list of custom attribute fields (also known as custom user fields) that are available for your account. The values returned correspond to the values you provided in the Shortname field when you defined the custom user field. For more info about defining custom user fields, see Custom User Fields. |
|
|
ID of the directory (Active Directory, LDAP, for example) from which the user was created. |
|
|
Synchronized from Active Directory. |
|
|
User’s email address, which he also uses to log in to OneLogin. |
|
|
External ID that can be used to uniquely identify the user in another system. |
|
|
User’s first name. |
|
|
Group to which the user belongs. |
|
|
User’s unique ID in OneLogin. |
|
|
Number of sequential invalid login attempts the user has made that is less than or equal to the Maximum invalid login attempts value defined on the Session page in OneLogin. When this number reaches this value, the user account will be locked for the amount of time defined by the Lock effective period field on the Session page and this value will be reset to 0. |
|
|
Date and time at which an invitation to OneLogin was sent to the user. |
|
|
Date and time of the user’s last login. |
|
|
User’s last name. |
|
|
Represents a geographical, political, or cultural region. Some features may use the locale value to tailor the display of information, such as numbers, for the user based on locale-specific customs and conventions. |
|
|
Date and time at which the user’s account will be unlocked. |
|
|
ID of the user’s manager in Active Directory. |
|
|
OneLogin ID of the user’s manager. |
|
|
Synchronized from Active Directory. |
|
|
OpenID URL that can be configured in other applications that accept OpenID for sign-in. |
|
|
Date and time at which the user’s password was last changed. |
|
|
User’s phone number. |
|
|
Role IDs to which the user is assigned. |
|
|
Synchronized from Active Directory. |
state |
Represents the user’s stage in a process (such as user account approval). User state determines the possible statuses a user account can be in. States include:
|
|
|
Determines the user’s ability to log in to OneLogin. Possible values:
|
|
|
Date and time at which the user’s information was last updated. |
|
|
If the user’s directory is set to authenticate using a user name value, this is the value used to sign in. |
|
|
Synchronized from Active Directory. |
Have a Question?
Have a how-to question? Seeing a weird error? Ask us about it on StackOverflow.
Found a bug? Submit a support ticket.
Have a product idea or request? Share it with us in our Ideas Portal.
StackOverflow discussions about "[onelogin] user api"
-
Q: AWS API credentials with OneLogin SAML and MFA
Asked Oct 30 2016We want to allow our users to retrieve a set of temporary CLI credentials for a given AWS role by signing in to OneLogin with password and MFA. We have a working solution, but it requires the user to … fully re-authenticate to OneLogin (including MFA) every 60 minutes as the AWS temporary credentials expire. I think that won't fly - our users are accustomed to permanent API credentials tied to a …
-
A: OneLogin REST API with PowerShell's Invoke-RestMethod
Answered Sep 05 2016saved to `$global:helpme" break } Then, wrap all of your Invoke-RestMethod calls in a try Catch block like this. try { $e = Invoke-WebRequest 'https://api.us.onelogin.com/api/1/users/$id … ":"notes is not a valid attribute for user model","attribute":"notes"}}} The request body has been saved to $global:helpme This was super helpful in helping me get rid of the errors I was …
-
Q: Can I use OneLogin API to generate SAML assertions in a standalone app?
Asked Aug 16 2016? OneLogin people, can you add an API credential type for calling only the SAML Assertion APIs? Or you could just make the API open. (Note that AWS's "AssumeRoleWithSAML" API doesn't require user … I want to use OneLogin to write a command-line program that takes a username/password and generates a SAML assertion that can be used to authenticate to other sites. The problem is that calling the …
-
A: Accessing Third Party Apps After Creating A Session Via API Token
Answered Mar 10 2017Two ways: If the app supports SP-initiated SAML, just navigate the user to the application and it'll do the whole SAML flow- App redirects to OneLogin - OL authenticates user (because you have a … like this: <a href="https://app.onelogin.com/launch/123456">Time Reporting</a> Details on that endpoint can be found here: https://developers.onelogin.com/api-docs/1/embed-apps/get-apps-to-embed …
-
Q: OneLogin session_via_api_token and Chrome
Asked Nov 14 2016I am getting a session token via an ajax call. This in turn calls the API method https://api.us.onelogin.com/api/1/login/auth $.post("onelogin.ashx?action=sessiontoken", data, function (s … ="hidden" id="session_token" name="session_token" value=""> <input type="submit" placeholder="GO"> <input id="auth_token" type="hidden"> </form> In IE and Firefox the user …
Loading...