Identity Access Management api (v1)

Download OpenAPI specification:Download

API to manage identity and access management.

Authentication

Bearer

JWT Authorization header using the Bearer scheme.

Security Scheme Type HTTP
HTTP Authorization Scheme bearer

LoginConfig

Get login configuration by tenant alias

Authorizations:
query Parameters
tenantAlias
string Nullable

Responses

Response samples

Content type
No sample

Permissions

Get all permissions

Authorizations:

Responses

Response samples

Content type
No sample

Creates a new permission

Authorizations:
Request Body schema:

The permission to create

description
string Nullable

The description of the permission, can change after creation

id
string Nullable

The identity of the permission, can not be changed

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Update an existing permission

Authorizations:
path Parameters
id
required
string Nullable

The document id for the permission

Request Body schema:

request

description
string Nullable

The description of the permission, can change after creation

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get a permission by id

Authorizations:
path Parameters
id
required
string Nullable

Permission ID

Responses

Response samples

Content type
No sample

Providers

Creates new OIDC connection

Authorizations:
path Parameters
tenantId
required
string
Request Body schema:
name
string Nullable

Provider name

type
string (ProviderType)
Enum: "Oidc" "Saml"

Identity Provider type.

userType
string (IdpUserType)
Enum: "Staff" "Shoppers"

User type

clientId
string Nullable

A public identifier for app

clientSecret
string Nullable

A secret known only to the application and the authorization server

issuer
string Nullable

Issuer URL

externalIdField
string (IdpExternalKey)
Enum: "Uid" "Email" "PhoneNumber"

The IdP external ID keys of the linked provider that is used for user linking

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get all providers

Authorizations:
path Parameters
tenantId
required
string

Responses

Response samples

Content type
No sample

Get a provider by id

Authorizations:
path Parameters
id
required
string Nullable

Provider id

tenantId
required
string

Responses

Response samples

Content type
No sample

Update a provider

Authorizations:
path Parameters
id
required
string Nullable
tenantId
required
string
Request Body schema:
name
string Nullable

Provider name

clientId
string Nullable

A public identifier for app

clientSecret
string Nullable

A secret known only to the application and the authorization server

issuer
string Nullable

Issuer URL

externalIdField
string (IdpExternalKey)
Enum: "Uid" "Email" "PhoneNumber"

The IdP external ID keys of the linked provider that is used for user linking

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Roles

Get all roles

Authorizations:
query Parameters
searchString
string Nullable
sortBy
string (SortBy)
Enum: "Id" "Name"
direction
string (SortDirection)
Enum: "Asc" "Desc"
offset
integer <int32> Nullable
limit
integer <int32> Nullable

Responses

Response samples

Content type
No sample

Creates a new role

Authorizations:
Request Body schema:

The role to create

name
string Nullable

The name of the role, can change after creation

permissions
Array of strings Nullable

A list of permissions

id
string Nullable

The identity of the role, can not be changed

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Update an existing role

Authorizations:
path Parameters
id
required
string Nullable

The document id for the role

Request Body schema:

The role object to update

name
string Nullable

The name of the role, can change after creation

permissions
Array of strings Nullable

A list of permissions

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get a role by id

Authorizations:
path Parameters
id
required
string Nullable

The document id for the role

Responses

Response samples

Content type
No sample

Delete an existing role

Authorizations:
path Parameters
id
required
string Nullable

The role document id to delete

Responses

Response samples

Content type
No sample

Tenants

Get all tenants

Authorizations:
query Parameters
alias
string Nullable

Responses

Response samples

Content type
No sample

Creates a new tenant

Authorizations:
Request Body schema:

The tenant to create

name
string Nullable

The name of the tenant, can change after creation

alias
string Nullable

The tenant alias. It must be unique

adminUser
string Nullable

The tenant admin user

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Update an existing tenant

Authorizations:
path Parameters
id
required
string Nullable

The document id for the tenant

Request Body schema:
name
string Nullable

The name of the tenant, can change after creation

alias
string Nullable

The tenant alias. It must be unique

adminUser
string Nullable

The tenant admin user

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get a tenant by id

Authorizations:
path Parameters
id
required
string Nullable

The identifier of the tenant

Responses

Response samples

Content type
No sample

UserGroups

Gets all the members of this group

Authorizations:
path Parameters
id
required
string Nullable

The document id of this group

tenantId
required
string

Responses

Response samples

Content type
No sample

Get all userGroups

Authorizations:
path Parameters
tenantId
required
string
query Parameters
searchString
string Nullable
sortBy
string (SortBy)
Enum: "Id" "Name"
direction
string (SortDirection)
Enum: "Asc" "Desc"
offset
integer <int32> Nullable
limit
integer <int32> Nullable

Responses

Response samples

Content type
No sample

Creates a new userGroup

Authorizations:
path Parameters
tenantId
required
string
Request Body schema:

The userGroup to create

name
string Nullable

The name of the user group, can change after creation

description
string Nullable

A text describing this group max 200 characters

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Update an existing userGroup

Authorizations:
path Parameters
id
required
string Nullable

The document id for the user group

tenantId
required
string
Request Body schema:

the new object to replace the old

name
string Nullable

The name of the user group, can change after creation

description
string Nullable

A text describing this group max 200 characters

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get a user group by id

Authorizations:
path Parameters
id
required
string Nullable

The document id for the user group

tenantId
required
string

Responses

Response samples

Content type
No sample

Delete an existing userGroup

Authorizations:
path Parameters
id
required
string Nullable

The user group document id to delete

tenantId
required
string

Responses

Response samples

Content type
No sample

Gets all roles for the group Deprecated

Authorizations:
path Parameters
id
required
string Nullable

The user group document ID

tenantId
required
string

Responses

Response samples

Content type
No sample

Adds a role to the group Deprecated

Authorizations:
path Parameters
id
required
string Nullable

The user group document ID

tenantId
required
string
query Parameters
roleId
required
string

the role document ID

Responses

Response samples

Content type
No sample

Deletes a role from the group

Authorizations:
path Parameters
id
required
string Nullable

The user group document ID

roleId
required
string Nullable

the role document ID

tenantId
required
string

Responses

Response samples

Content type
No sample

UserProfile

Update an existing user

Authorizations:
path Parameters
tenantId
required
string
Request Body schema:
displayName
string Nullable

The display name for the user

email
string Nullable

The email address for the user

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get a user by id

Authorizations:
path Parameters
tenantId
required
string

Responses

Response samples

Content type
No sample

Reset password own user

Authorizations:
path Parameters
tenantId
required
string
Request Body schema:
newPassword
string Nullable

The new password for the user

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Get all user permissions

Authorizations:
path Parameters
tenantId
required
string

Responses

Response samples

Content type
No sample

Users

Get all userGroupLinks

Authorizations:
path Parameters
userId
required
string Nullable
tenantId
required
string

Responses

Response samples

Content type
No sample

Creates a new user group link

Authorizations:
path Parameters
userId
required
string Nullable

The document id for the user

tenantId
required
string
query Parameters
UserGroupDocumentId
string Nullable

The document id for the user group

Responses

Response samples

Content type
No sample

Delete an existing user group link

Authorizations:
path Parameters
userId
required
string Nullable

The document id for the user

id
required
string Nullable

The user group link document id to delete

tenantId
required
string

Responses

Get users

Authorizations:
path Parameters
tenantId
required
string
query Parameters
googleUserId
string Nullable

Google Identity Platform user identifier

Responses

Response samples

Content type
No sample

Creates a new user

Authorizations:
path Parameters
tenantId
required
string
Request Body schema:

The user to create

name
string Nullable

The name of the user

email
string Nullable

The email of the user

password
string Nullable

The password of the user

type
string (UserType)
Enum: "Federated" "Standalone"

User type

scope
string (UserScope)
Enum: "Staff" "Shoppers"

User scope

externalId
string Nullable

The external user ID

externalProviderId
string Nullable

The external provider ID

Responses

Request samples

Content type
{ }

Response samples

Content type
No sample

Update an existing user Deprecated

Authorizations:
path Parameters
id
required
string Nullable

The document id for the user

tenantId
required
string
query Parameters
name
required
string

The name of user

Responses

Response samples

Content type
No sample

Get a user by id

Authorizations:
path Parameters
id
required
string Nullable

The document id for the user

tenantId
required
string

Responses

Response samples

Content type
No sample