Skip to main content

Retrieve the information returned by the identity provider

POST 
/v2/idp_intents/:idpIntentId

Retrieve the information returned by the identity provider for registration or updating an existing user with new information..

Request​

Path Parameters

    idpIntentId stringrequired

    ID of the idp intent, previously returned on the success response of the IDP callback

Body

required

    idpIntentToken string

    Possible values: non-empty and <= 200 characters

    token of the idp intent, previously returned on the success response of the IDP callback

Responses​

OK

Schema

    details

    object

    sequence uint64

    on read: the sequence of the last event reduced by the projection

    on manipulation: the timestamp of the event(s) added by the manipulation

    changeDate date-time

    on read: the timestamp of the last event reduced by the projection

    on manipulation: the timestamp of the event(s) added by the manipulation

    resourceOwner resource_owner is the organization or instance_id an object belongs to (string)
    creationDate date-time

    idpInformation

    object

    oauth

    object

    OAuth/OIDC access (and id_token) returned by the identity provider

    accessToken string
    idToken string

    ldap

    object

    LDAP entity attributes returned by the identity provider

    attributes object

    saml

    object

    SAMLResponse returned by the identity provider

    assertion byte
    idpId string

    ID of the identity provider

    userId string

    ID of the user of the identity provider

    userName string

    username of the user of the identity provider

    rawInformation object

    complete information returned by the identity provider

    userId string

    ID of the user in ZITADEL if external user is linked

    addHumanUser

    object

    userId string

    Possible values: non-empty and <= 200 characters

    optionally set your own id unique for the user.

    username string

    Possible values: non-empty and <= 200 characters

    optionally set a unique username, if none is provided the email will be used.

    organization

    object

    orgId string
    orgDomain string

    profile

    object

    required

    givenName stringrequired

    Possible values: non-empty and <= 200 characters

    familyName stringrequired

    Possible values: non-empty and <= 200 characters

    nickName string

    Possible values: <= 200 characters

    displayName string

    Possible values: <= 200 characters

    preferredLanguage string

    Possible values: <= 10 characters

    gender string

    Possible values: [GENDER_UNSPECIFIED, GENDER_FEMALE, GENDER_MALE, GENDER_DIVERSE]

    Default value: GENDER_UNSPECIFIED

    email

    object

    required

    email stringrequired

    Possible values: non-empty and <= 200 characters

    sendCode

    object

    urlTemplate string

    Possible values: non-empty and <= 200 characters

    Optionally set a url_template, which will be used in the verification mail sent by ZITADEL to guide the user to your verification page. If no template is set, the default ZITADEL url will be used.

    The following placeholders can be used: UserID, OrgID, Code

    returnCode object
    isVerified boolean

    phone

    object

    phone string

    Possible values: <= 200 characters

    sendCode object
    returnCode object
    isVerified boolean

    metadata

    object[]

  • Array [

    • key stringrequired

    Possible values: non-empty and <= 200 characters

    value byterequired

    Possible values: non-empty and <= 500000 characters

    The value has to be base64 encoded.

  • ]

    • password

    object

    password stringrequired

    Possible values: non-empty and <= 200 characters

    changeRequired boolean

    hashedPassword

    object

    hash stringrequired

    Possible values: non-empty and <= 200 characters

    "Encoded hash of a password in Modular Crypt Format: https://zitadel.com/docs/concepts/architecture/secrets#hashed-secrets"

    changeRequired boolean

    idpLinks

    object[]

  • Array [

    • idpId string

    Possible values: non-empty and <= 200 characters

    ID of the identity provider

    userId string

    Possible values: non-empty and <= 200 characters

    ID of the user of the identity provider

    userName string

    Possible values: non-empty and <= 200 characters

    username of the user of the identity provider

  • ]

    • totpSecret string

    Possible values: non-empty and <= 200 characters

    An Implementation of RFC 6238 is used, with HMAC-SHA-1 and time-step of 30 seconds. Currently no other options are supported, and if anything different is used the validation will fail.

Loading...