Skip to main content
POST
Create a user

Authorizations

x-api-key
string
header
required
Authorization
string
header
required

Body

email
string
required

Email address of the user.

Minimum string length: 1
Example:

"user@domain.com"

provider
string

Where the user is created: Default or Auth0.

When omitted: Default.

Example:

"Auth0"

password
string | null

Password for the user.

Password must include atleast one lowercase character, uppercase character, numeric character as well as a special character.

expireAfterDays
integer<int32> | null

Expire after the specified days. Must be left blank for users that do not expire.

Example:

7

isInternal
boolean

Creates the user as an internal user.

Internal users are excluded from billing and license counts.

Use this option for testing, background services, or other non-customer-facing purposes.

Example:

true

bypassMfa
boolean

Bypasses multi-factor authentication for the user.

When enabled, the user will not be prompted for two factor authentication during login.

Example:

true

initialPassword
string | null

How the user gets their first password: Permanent (the supplied password is final), Temporary (the supplied password must be changed at first sign-in) or Invitation (the user is emailed the way to set their own; any supplied password is ignored).

Permanent and Temporary require a password; nothing is emailed for them, the caller delivers the password.

When omitted: Invitation if no password is supplied, otherwise Permanent.

Example:

"Temporary"

Response

When the user was created. Returns the created 'User' object.

id
string | null
href
string | null
relation
string | null
method
string | null
default:GET
self
object | null
userId
string | null

Unique identifier of the user.

Example:

"23d2a4bc-8529-462e-8560-dfbf4fa24e49"

email
string | null

Email address of the user.

Example:

"user@domain.com"

isInternal
boolean

Returns true if the user is flagged as an internal user.

Example:

true

bypassMfa
boolean

Returns true if multi-factor authentication is bypassed for the user.

Example:

true