User Resource
User-related dates and times use the Coordinated Universal Time (UTC) format: YYYY-MM-DDThh:mm:ss.mscZ. For example: 2016-01-21T09:20:15.990Z.
| Element | Description |
|---|---|
|
|
Date and time at which the user’s status was set to |
|
|
Date and time at which the user was created. |
custom_attributes |
Provides a list of custom attribute fields (also known as custom user fields) that are available for your account. The values returned correspond to the values you provided in the Shortname field when you defined the custom user field. For more info about defining custom user fields, see Custom User Fields. |
|
|
ID of the directory (Active Directory, LDAP, for example) from which the user was created. |
|
|
Synchronized from Active Directory. |
|
|
User’s email address, which he also uses to log in to OneLogin. |
|
|
External ID that can be used to uniquely identify the user in another system. |
|
|
User’s first name. |
|
|
Group to which the user belongs. |
|
|
User’s unique ID in OneLogin. |
|
|
Number of sequential invalid login attempts the user has made that is less than or equal to the Maximum invalid login attempts value defined on the Session page in OneLogin. When this number reaches this value, the user account will be locked for the amount of time defined by the Lock effective period field on the Session page and this value will be reset to 0. |
|
|
Date and time at which an invitation to OneLogin was sent to the user. |
|
|
Date and time of the user’s last login. |
|
|
User’s last name. |
|
|
Represents a geographical, political, or cultural region. Some features may use the locale value to tailor the display of information, such as numbers, for the user based on locale-specific customs and conventions. |
|
|
Date and time at which the user’s account will be unlocked. |
|
|
ID of the user’s manager in Active Directory. |
|
|
Synchronized from Active Directory. |
|
|
Notes entered for the user. |
|
|
OpenID URL that can be configured in other applications that accept OpenID for sign-in. |
|
|
Date and time at which the user’s password was last changed. |
|
|
User’s phone number. |
|
|
Role IDs to which the user is assigned. |
|
|
Synchronized from Active Directory. |
state |
Represents the user’s stage in a process (such as user account approval). User state determines the possible statuses a user account can be in. States include:
|
|
|
Determines the user’s ability to log in to OneLogin. Possible values:
|
|
|
Date and time at which the user’s information was last updated. |
|
|
If the user’s directory is set to authenticate using a user name value, this is the value used to sign in. |
|
|
Synchronized from Active Directory. |
Have a Question?
Have a how-to question? Seeing a weird error? Ask us about it on StackOverflow.
Found a bug? Submit a support ticket.
Have a product idea or request? Share it with us in our Ideas Portal.
StackOverflow discussions about "[onelogin] user api"
-
A: OneLogin REST API with PowerShell's Invoke-RestMethod
Answered Sep 05 2016saved to `$global:helpme" break } Then, wrap all of your Invoke-RestMethod calls in a try Catch block like this. try { $e = Invoke-WebRequest 'https://api.us.onelogin.com/api/1/users/$id … ":"notes is not a valid attribute for user model","attribute":"notes"}}} The request body has been saved to $global:helpme This was super helpful in helping me get rid of the errors I …
-
Q: AWS API credentials with OneLogin SAML and MFA
Asked Oct 30 2016We want to allow our users to retrieve a set of temporary CLI credentials for a given AWS role by signing in to OneLogin with password and MFA. We have a working solution, but it requires the user … to fully re-authenticate to OneLogin (including MFA) every 60 minutes as the AWS temporary credentials expire. I think that won't fly - our users are accustomed to permanent API credentials tied …
-
Q: OneLogin REST API with PowerShell's Invoke-RestMethod
Asked Sep 04 2016I'm working against the OneLogin REST API and can't seem to get any calls with a PUT method working. When I test in Postman, I can pass a raw JSON body like this: { "role_id_array … ": [ 115028 ] } to the endpoint: https://api.us.onelogin.com/api/1/users//add_roles This works just fine. However, when I attempt to do the same with PowerShell's …
-
Q: Can I use OneLogin API to generate SAML assertions in a standalone app?
Asked Aug 16 2016this? OneLogin people, can you add an API credential type for calling only the SAML Assertion APIs? Or you could just make the API open. (Note that AWS's "AssumeRoleWithSAML" API doesn't require user … I want to use OneLogin to write a command-line program that takes a username/password and generates a SAML assertion that can be used to authenticate to other sites. The problem is that calling …
-
Q: OneLogin session_via_api_token and Chrome
Asked Nov 14 2016I am getting a session token via an ajax call. This in turn calls the API method https://api.us.onelogin.com/api/1/login/auth $.post("onelogin.ashx?action=sessiontoken", data, function (s … ="hidden" id="session_token" name="session_token" value=""> <input type="submit" placeholder="GO"> <input id="auth_token" type="hidden"> </form> In IE and Firefox the user …
Loading...