Returns all User resources.​
This endpoint returns all User resources. There are attributes marked as 'returned only by request', such as roles, which must be provided as part of the attributes query parameter in order to be included in the response.
Query Parameters
- filter string
Allows for query filters according to RFC-7644, Section 3.4.2.2 - not all operations are supported.
- sortBy string
Allows sorting the results by a resource's attributes.
- sortOrder string
Default value:
ascending
Determines what order to sort results in.
- startIndex integer
Default value:
1
Determines the starting index of the result set.
- count integer
Default value:
1000
Specifies the number of results per page.
- attributes string
A comma-separated list of attributes to return in the response. This query parameter supersedes excludedAttributes, so providing the same attribute(s) to both will result in the attribute(s) being returned.
- excludedAttributes string
A comma-separated list of attributes to exclude from the response. Some attributes cannot be excluded.
- 200
Returns all SCIM User resources.
- application/json
- application/scim+json
- Schema
- Example (from schema)
Schema
- totalResults integer
Number of User resources returned
- startIndex integer
The starting index of the resource set list. Can be specified with startIndex query parameter.
- schemas string[]
SCIM Schema used for response.
Resources undefined[]
id stringIdentityIQ id of the User.
userName stringUnique identifier for the User. Typically used to directly authenticate to the service provider. Each User MUST include a non-empty userName value. This identifier MUST be unique across the entire set of Users. Cannot be changed.
name
The components of the User’s real name. Providers may return just the full name as a single string in the formatted sub-attribute, or they MAY return just the individual component attributes using the other sub-attributes, or they MAY return both. If both variants are returned, they SHOULD be describing the same name, with the formatted name indicating how the component attributes should be combined.
formatted stringThe full name, including all middle names, titles, and suffixes as appropriate, formatted for display.
familyName stringThe family name of the User, or Last Name in most Western languages
givenName stringThe given name of the User, or First Name in most Western languages
displayName stringThe name of the User, suitable for display to end-users. The name should be the full name of the User being described.
userType stringThe type of the User, identifying the relationship between the organization and the User.
active booleanA Boolean value indicating the User’s administrative status.
emails undefined[]
Email addresses for the user. The value SHOULD be canonicalized by the Service Provider, e.g., bjensen@example.com instead of bjensen@EXAMPLE.COM. Canonical Type values of work, home, and other.
type stringType of email address (work, home, other).
value emailCanonicalized email address.
primary booleanA Boolean value indicating the primary e-mail address. The primary attribute value 'true' MUST appear no more than once.
urn:ietf:params:scim:schemas:sailpoint:1.0:User object
Additional attributes of the User.
accounts undefined[]
Simple representation of the Account (or Link) ResourceType.
displayName stringThe display name of the Account.
value stringThe id of the SCIM resource representing the Account.
$ref stringThe URI of the SCIM resource representing the Account.
entitlements undefined[]
Entitlements of the User. Returned in response only if requested using the 'attributes' query parameter.
value stringThe value of the Entitlement.
display stringThe display name of the Entitlement.
type stringThe type of Entitlement (Entitlement, Permission, etc.).
application stringThe name of the Application this Entitlement applies to.
accountName stringThe account this Entitlement was sourced from.
$ref stringThe URI of the SCIM resource representing the Entitlement.
roles undefined[]
Roles of the User. Returned only if requested. Returned in response only if requested using the 'attributes' query parameter.
value stringThe value of the Role.
display stringThe display name of the Role.
type stringThe type of Role (IT, Business, etc.).
acquired stringIndicates how this Role was acquired. Assigned or Detected.
application stringThe name of the Application where this Role came from.
accountName stringThe name of the Account this Role was sourced from.
$ref stringThe URI of the SCIM resource representing the Role.
capabilities string[]Capabilities assigned to this User.
riskScore integerComposite Risk Score of this User.
isManager booleanA Boolean value that determines if this User is a manager.
administrator
The Administrator of the RPA or Service Account. This attribute is only applicable if the User type is RPA/Bots or Service.
displayName stringThe display name of the Administrator of RPA user or Service account.
value stringThe id of the SCIM resource representing the Administrator of RPA user or Service account.
$ref stringThe URI of the SCIM resource representing the Administrator of RPA user or Service Account.
softwareVersion stringThe software version of the RPA/Bots.
empId stringEmployee id associated with this User.
dn stringDistinguished name for this User.
region stringThe region this User is assigned to.
regionOwner
The User who owns the region that this resource (User) belongs to.
displayName stringDisplay name of the region owner.
value stringThe id of the region owner.
$ref stringURI reference of the region owner resource.
location stringThe location this User is assigned to.
locationOwner object
The User who owns the location that this resource (User) belongs to.
displayName stringDisplay name of the location owner.
value stringThe id of the location owner.
$ref stringURI reference to the location owner resource.
Department stringDepartment this User is assigned to.
costcenter string[]Cost centers this User is associated with.
jobtitle stringJob title given to this User.
lastRefresh date-timeDatetime representation of the last refresh for this User.
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User
Enterprise User Schema. Contains the manager of the User.
manager
Manager of the User.
displayName stringDisplay name of the User's manager.
value stringThe id of the SCIM resource representing the User’s manager.
$ref stringThe URI of the SCIM resource representing the User’s manager.
meta
Metadata of the resource.
created date-timeDatetime this resource was created.
location stringThe location of the resource.
lastModified date-timeDatetime the resource was last modified.
version stringThe version of the resource.
resourceType stringThe SCIM resource type.
schemas string[]The schemas involved in the SCIM resource.
{
"totalResults": "18,",
"startIndex": 1,
"schemas": [
"urn:ietf:params:scim:api:messages:2.0:ListResponse"
],
"Resources": [
{
"id": "c0b4568a4fe7458c434ee77d1fbt156b",
"userName": "Mock.User",
"name": {
"formatted": "Ms. Barbara J Jensen, III",
"familyName": "Jensen",
"givenName": "Barbara"
},
"displayName": "Barbara Jensen",
"userType": "employee",
"active": true,
"emails": [
{
"type": "work",
"value": "Barbara.Jensen@example.com",
"primary": "true"
}
],
"urn:ietf:params:scim:schemas:sailpoint:1.0:User": {
"accounts": [
{
"displayName": "Bob.Smith",
"value": "c0a7778b7ef71e79817ee74e6a1f0444",
"$ref": "http://localhost:8080/iiq/scim/v2/Accounts/c0a7778b7ef71e79817ee74e6a1f0444"
}
],
"entitlements": [
{
"value": "groupmbr",
"display": "HelpDesk",
"type": "Permission",
"application": "ADMockApp",
"accountName": "CN=Barbara Jensen,OU=Taipei,OU=Asia-Pacific,DC=example,DC=com",
"$ref": "http://localhost:8080/iiq/scim/v2/Entitlements/c0a7777a7f74744d817e74fc12362c67"
}
],
"roles": [
{
"value": "detectedRoles",
"display": "User - IT",
"type": "it",
"acquired": "Assigned",
"application": "Active_Directory",
"accountName": "CN=Barbara Jensen,OU=Taipei,OU=Asia-Pacific,DC=example,DC=com",
"$ref": "http://localhost:8080/iiq/scim/v2/Roles/c0a7777a7f74744d817e74fc12362c67"
}
],
"capabilities": "[\"SystemAdministrator\"]",
"riskScore": 125,
"isManager": false,
"administrator": {
"displayName": "Bob Smith",
"value": "c0a7777a7f74744d817e74fc12362c67O",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0a7777a7f74744d817e74fc12362c67"
},
"softwareVersion": "7.3",
"empId": "1b2a3c",
"dn": "cn=Bob Smith,ou=services",
"region": "Americas",
"regionOwner": {
"displayName": "Joe Smith",
"value": "c0b4568a4fe7458c434ee77d1fbt156b",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0b4568a4fe7458c434ee77d1fbt156b"
},
"location": "Singapore",
"locationOwner": {
"displayName": "Bob Smith",
"value": "c0a7778b7ef71e79817ee74e6a1f0444",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0a7778b7ef71e79817ee74e6a1f0444"
},
"Department": "Regional Operations",
"costcenter": [
"CC01",
"DD02"
],
"jobtitle": "Internal Audit Manager",
"lastRefresh": "2023-08-08"
},
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
"manager": {
"displayName": "Bob Smith",
"value": "c7a7347a7fe71e69077ee75f5d1f1237",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c7a7347a7fe71e69077ee75f5d1f1237"
}
},
"meta": {
"created": "2022-02-11T01:34:04.074-05:00",
"location": "http://localhost:8080/iiq/scim/v2/Users/c0b4568a4fe7458c434ee77d1fbt156b",
"lastModified": "2022-02-11T01:08:45.866-05:00",
"version": "W\"1644561244074\"",
"resourceType": "User"
},
"schemas": [
"urn:ietf:params:scim:schemas:sailpoint:1.0:User",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
]
}
]
}
- Schema
- Example (from schema)
Schema
- totalResults integer
Number of User resources returned.
- startIndex integer
The starting index of the resource set list. Can be specified with startIndex query parameter.
- schemas string[]
SCIM Schema used for response.
Resources undefined[]
The SCIM resources returned for this endpoint.
id stringIdentityIQ id of the User.
userName stringUnique identifier for the User. Typically used to directly authenticate to the service provider. Each User MUST include a non-empty userName value. This identifier MUST be unique across the entire set of Users. Cannot be changed.
name
The components of the User’s real name. Providers may return just the full name as a single string in the formatted sub-attribute, or they MAY return just the individual component attributes using the other sub-attributes, or they MAY return both. If both variants are returned, they SHOULD be describing the same name, with the formatted name indicating how the component attributes should be combined.
formatted stringThe full name, including all middle names, titles, and suffixes as appropriate, formatted for display.
familyName stringThe family name of the User, or Last Name in most Western languages
givenName stringThe given name of the User, or First Name in most Western languages
displayName stringThe name of the User, suitable for display to end-users. The name should be the full name of the User being described.
userType stringThe type of the User, identifying the relationship between the organization and the User.
active booleanA Boolean value indicating the User’s administrative status.
emails undefined[]
Email addresses for the user. The value SHOULD be canonicalized by the Service Provider, e.g., bjensen@example.com instead of bjensen@EXAMPLE.COM. Canonical Type values of work, home, and other.
type stringType of email address (work, home, other).
value emailCanonicalized email address.
primary booleanA Boolean value indicating the primary e-mail address. The primary attribute value 'true' MUST appear no more than once.
urn:ietf:params:scim:schemas:sailpoint:1.0:User object
Additional attributes of the User.
accounts undefined[]
Simple representation of the Account (or Link) ResourceType.
displayName stringThe display name of the Account.
value stringThe id of the SCIM resource representing the Account.
$ref stringThe URI of the SCIM resource representing the Account.
entitlements undefined[]
Entitlements of the User. Returned in response only if requested using the 'attributes' query parameter.
value stringThe value of the Entitlement.
display stringThe display name of the Entitlement.
type stringThe type of Entitlement (Entitlement, Permission, etc.).
application stringThe name of the Application this Entitlement applies to.
accountName stringThe account this Entitlement was sourced from.
$ref stringThe URI of the SCIM resource representing the Entitlement.
roles undefined[]
Roles of the User. Returned only if requested. Returned in response only if requested using the 'attributes' query parameter.
value stringThe value of the Role.
display stringThe display name of the Role.
type stringThe type of Role (IT, Business, etc.).
acquired stringIndicates how this Role was acquired. Assigned or Detected.
application stringThe name of the Application where this Role came from.
accountName stringThe name of the Account this Role was sourced from.
$ref stringThe URI of the SCIM resource representing the Role.
capabilities string[]Capabilities assigned to this User.
riskScore integerComposite Risk Score of this User.
isManager booleanA Boolean value that determines if this User is a manager.
administrator
The Administrator of the RPA or Service Account. This attribute is only applicable if the User type is RPA/Bots or Service.
displayName stringThe display name of the Administrator of RPA user or Service account.
value stringThe id of the SCIM resource representing the Administrator of RPA user or Service account.
$ref stringThe URI of the SCIM resource representing the Administrator of RPA user or Service Account.
softwareVersion stringThe software version of the RPA/Bots.
empId stringEmployee id associated with this User.
dn stringDistinguished name for this User.
region stringThe region this User is assigned to.
regionOwner
The User who owns the region that this resource (User) belongs to.
displayName stringDisplay name of the region owner.
value stringThe id of the region owner.
$ref stringURI reference of the region owner resource.
location stringThe location this User is assigned to.
locationOwner object
The User who owns the location that this resource (User) belongs to.
displayName stringDisplay name of the location owner.
value stringThe id of the location owner.
$ref stringURI reference to the location owner resource.
Department stringDepartment this User is assigned to.
costcenter string[]Cost centers this User is associated with.
jobtitle stringJob title given to this User.
lastRefresh date-timeDatetime representation of the last refresh for this User.
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User
Enterprise User Schema. Contains the manager of the User.
manager
Manager of the User.
displayName stringDisplay name of the User's manager.
value stringThe id of the SCIM resource representing the User’s manager.
$ref stringThe URI of the SCIM resource representing the User’s manager.
meta
Metadata of the resource.
created date-timeDatetime this resource was created.
location stringThe location of the resource.
lastModified date-timeDatetime the resource was last modified.
version stringThe version of the resource.
resourceType stringThe SCIM resource type.
schemas string[]The schemas involved in the SCIM resource.
{
"totalResults": "1500,",
"startIndex": 1,
"schemas": [
"urn:ietf:params:scim:api:messages:2.0:ListResponse"
],
"Resources": [
{
"id": "c0b4568a4fe7458c434ee77d1fbt156b",
"userName": "Mock.User",
"name": {
"formatted": "Ms. Barbara J Jensen, III",
"familyName": "Jensen",
"givenName": "Barbara"
},
"displayName": "Barbara Jensen",
"userType": "employee",
"active": true,
"emails": [
{
"type": "work",
"value": "Barbara.Jensen@example.com",
"primary": "true"
}
],
"urn:ietf:params:scim:schemas:sailpoint:1.0:User": {
"accounts": [
{
"displayName": "Bob.Smith",
"value": "c0a7778b7ef71e79817ee74e6a1f0444",
"$ref": "http://localhost:8080/iiq/scim/v2/Accounts/c0a7778b7ef71e79817ee74e6a1f0444"
}
],
"entitlements": [
{
"value": "groupmbr",
"display": "HelpDesk",
"type": "Permission",
"application": "ADMockApp",
"accountName": "CN=Barbara Jensen,OU=Taipei,OU=Asia-Pacific,DC=example,DC=com",
"$ref": "http://localhost:8080/iiq/scim/v2/Entitlements/c0a7777a7f74744d817e74fc12362c67"
}
],
"roles": [
{
"value": "detectedRoles",
"display": "User - IT",
"type": "it",
"acquired": "Assigned",
"application": "Active_Directory",
"accountName": "CN=Barbara Jensen,OU=Taipei,OU=Asia-Pacific,DC=example,DC=com",
"$ref": "http://localhost:8080/iiq/scim/v2/Roles/c0a7777a7f74744d817e74fc12362c67"
}
],
"capabilities": "[\"SystemAdministrator\"]",
"riskScore": 125,
"isManager": false,
"administrator": {
"displayName": "Bob Smith",
"value": "c0a7777a7f74744d817e74fc12362c67O",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0a7777a7f74744d817e74fc12362c67"
},
"softwareVersion": "7.3",
"empId": "1b2a3c",
"dn": "cn=Bob Smith,ou=services",
"region": "Americas",
"regionOwner": {
"displayName": "Joe Smith",
"value": "c0b4568a4fe7458c434ee77d1fbt156b",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0b4568a4fe7458c434ee77d1fbt156b"
},
"location": "Singapore",
"locationOwner": {
"displayName": "Bob Smith",
"value": "c0a7778b7ef71e79817ee74e6a1f0444",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c0a7778b7ef71e79817ee74e6a1f0444"
},
"Department": "Regional Operations",
"costcenter": [
"CC01",
"DD02"
],
"jobtitle": "Internal Audit Manager",
"lastRefresh": "2023-08-08"
},
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
"manager": {
"displayName": "Bob Smith",
"value": "c7a7347a7fe71e69077ee75f5d1f1237",
"$ref": "http://localhost:8080/iiq/scim/v2/Users/c7a7347a7fe71e69077ee75f5d1f1237"
}
},
"meta": {
"created": "2022-02-11T01:34:04.074-05:00",
"location": "http://localhost:8080/iiq/scim/v2/Users/c0b4568a4fe7458c434ee77d1fbt156b",
"lastModified": "2022-02-11T01:08:45.866-05:00",
"version": "W\"1644561244074\"",
"resourceType": "User"
},
"schemas": [
"urn:ietf:params:scim:schemas:sailpoint:1.0:User",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
]
}
]
}