{
"token": "<string>",
"mfaTempToken": "<string>",
"requireResetPassword": true,
"user": {
"name": "<string>",
"state": "STATE_UNSPECIFIED",
"email": "<string>",
"title": "<string>",
"userType": "USER_TYPE_UNSPECIFIED",
"mfaEnabled": true,
"tempOtpSecret": "<string>",
"tempRecoveryCodes": [
"<string>"
],
"tempOtpSecretCreatedTime": "2023-11-07T05:31:56Z",
"phone": "<string>",
"profile": {
"lastLoginTime": "2023-11-07T05:31:56Z",
"lastChangePasswordTime": "2023-11-07T05:31:56Z",
"source": "<string>"
},
"groups": [
"<string>"
]
}
}Authenticates a user and returns access tokens. Permissions required: None
{
"token": "<string>",
"mfaTempToken": "<string>",
"requireResetPassword": true,
"user": {
"name": "<string>",
"state": "STATE_UNSPECIFIED",
"email": "<string>",
"title": "<string>",
"userType": "USER_TYPE_UNSPECIFIED",
"mfaEnabled": true,
"tempOtpSecret": "<string>",
"tempRecoveryCodes": [
"<string>"
],
"tempOtpSecretCreatedTime": "2023-11-07T05:31:56Z",
"phone": "<string>",
"profile": {
"lastLoginTime": "2023-11-07T05:31:56Z",
"lastChangePasswordTime": "2023-11-07T05:31:56Z",
"source": "<string>"
},
"groups": [
"<string>"
]
}
}User's email address.
User's password for authentication.
If web is set, we will set access token, refresh token, and user to the cookie.
The name of the identity provider. Format: idps/{idp}
The idp_context is using to get the user information from identity provider.
Show child attributes
The otp_code is used to verify the user's identity by MFA.
The recovery_code is used to recovery the user's identity with MFA.
The mfa_temp_token is used to verify the user's identity by MFA.
OK
Access token for authenticated requests.
Temporary token for MFA verification.
Whether user must reset password before continuing.
The user from the successful login.
Show child attributes
The name of the user. Format: users/{user}. {user} is a system-generated unique ID.
The lifecycle state of the user account.
STATE_UNSPECIFIED, ACTIVE, DELETED The email address of the user, used for login and notifications.
The display title or full name of the user.
The type of user account.
USER_TYPE_UNSPECIFIED, USER, SYSTEM_BOT, SERVICE_ACCOUNT The mfa_enabled flag means if the user has enabled MFA.
Temporary OTP secret used during MFA setup and regeneration.
Temporary recovery codes used during MFA setup and regeneration.
Timestamp when temp_otp_secret was created. Used by frontend to show countdown timer.
Should be a valid E.164 compliant phone number. Could be empty.
User profile metadata.
Show child attributes
The last time the user successfully logged in.
The last time the user changed their password.
source means where the user comes from. For now we support Entra ID SCIM sync, so the source could be Entra ID.
The groups for the user. Format: groups/{email}
Was this page helpful?