User Management API

A central part of One.Identity is the management of users, called henceforth Online Users.

Online Users

The User Management API provides the following functionalities:

• user flows (registration, activation, password reset)
• user data management
• user state management (TEMPORARY_LOCK, PERMANENT_LOCK, PENDING, etc.)
• role management (service user, release engineer)
• search
• event stream with all changes (contact us if you need a subscription)

Online Users Deletion

User deletes cannot be performed with the User Management API. The reason is that the Online User may be shared with other products / business groups or we may have legal reasons where we need to keep them more.

There are 2 ways a user may be deleted from One.Identity:

1. GDPR Request - Each week, our support departement receives calls from users that want Haufe to delete their data. Whenever this happens we get a ticket with the details of the user that needs to be deleted and we remove her/him.

2. ILM Cycle - Identity Lifecycle Management is an ongoing project that 3 times a year we run a cleanup of OnlineUsers which have not been used and we do not have any legal reason where we need to keep the data. Please read the following FSILM Guidelines to know how to keep your users.

Miscellaneous

The main characteristic of an Online User is its ability to authenticate (by logging in and getting an SSO token to reuse for most requests) by using the email and the password. This is done via the Authentication API.

Personal address is the private address of the user. It acts as a billing or shipping address if no such addresses exist in the system. The billing address is where the invoice is sent out from SAP and is information pertaining to the debitor. Similarly, the shipping address represents the delivery address.

An anonymous user is an entity able to hold a test license for a certain period of time. Its authentication level is lower than that of a normal user. If a user logs in, a session upgrade mechanism is in place, replacing the anonymous user with a normal one. This is called session upgrade.

View Swagger definition »