Accounts

Use the Accounts API to create and manage the child accounts that sit under your OneLogin reseller account.

The Accounts API is available only to reseller accounts. If the API credential that generated your access token belongs to an account that isn’t a reseller, every call returns 422 with the name Insufficient privileges.

Each call acts on the account that owns the API credential used to generate the access token. It can read and change only that account’s direct child accounts, so a child’s own child accounts aren’t included.

Account Object

The List, Get, Create, and Update Account APIs return accounts in this shape. Dates and times are in UTC, in ISO 8601 format, for example 2024-05-01T17:20:31.000Z.

id

integer

The account's unique ID in OneLogin.

name

string

The account name, usually the name of the customer, company, or organization.

address1

string

Line 1 of the account's address.

address2

string

Line 2 of the account's address.

city

string

The city the account is based in.

state

string

The state or region the account is based in.

zip

string

The account's postal code.

country

string

The country the account is based in. New accounts are always created with US; use Update Account to change it.

phone

string

A phone number for the account.

homepage

string

The URL of the organization's public website.

notes

string

Free-text notes about the account.

remotetoken

string

The shared secret for the account's Remote Authentication integration. Treat it like a password: don't log it or show it to end users.

created_at

string

When the account was created.

updated_at

string

When the account was last updated.

roles

array

The account's roles, each with an id and name. Returned by Get Account only. Every new account starts with a role named Default.

For the previous version of this API, see Accounts (v1-v3).

In This Section