Boomi Platform API Reference (1.0.0) - AccountUserFederation
The Account User Federation object represents the linkage between an user enabled for single sign-on, an account used by that user, and the user's federation ID. The implementation of single sign-on with SAML uses unique federation IDs to identify users.
Required Privileges
Read and Write access
- API — Use the Boomi Platform API to access account data.
- ACCOUNT_ADMIN — Account configuration and administration.
Creates an AccountUserFederation object
Enables single sign-on for a specific user under a specific account using a specific federation ID. The user is not visible in the Setup page unless you assign one or more roles to that user.
Authorizations:
Request Body schema: optional
| accountId | string The account ID. |
| federationId | string The federation ID uniquely identifies the user. |
| id | string The object’s conceptual ID, which is synthesized from the federation, user, and account IDs. |
| userId | string The user ID. |
Responses
Response Schema:
| accountId | string The account ID. |
| federationId | string The federation ID uniquely identifies the user. |
| id | string The object’s conceptual ID, which is synthesized from the federation, user, and account IDs. |
| userId | string The user ID. |
Request samples
- Payload
{- "federationId": "user123",
- "userId": "user123@company.biz",
- "accountId": "account-123456"
}Response samples
- 200
- 403
- 410
- 503
{- "@type": "AccountUserFederation",
- "id": "Ab0Cd1Ef1Gh3Ij4Kl5Mn6Op7Qr8St9Uv0Wx9Yz8Zy7Xw6Vu5Ts",
- "accountId": "account-123456",
- "userId": "user123@company.biz",
- "federationId": "user123"
}Queries for an AccountUserFederation object(s)
For general information about the structure of QUERY filters, their sample payloads, and how to handle the paged results, refer to Query filters and Query paging.
Authorizations:
Request Body schema: optional
Possible properties include: accountId, userId, federationId
required | object | ||||||||||
| |||||||||||
Responses
Response Schema:
| numberOfResults | integer <int32> |
| queryToken | string By default, the queryToken parameter is not available in the query response. It appears only when the query response contains more than 100 results. The maximum number of results returned per query is 100. To retrieve the next set of results, use the queryToken in the queryMore request. |
Array of objects (AccountUserFederation) |
Request samples
- Payload
{- "QueryFilter": {
- "expression": {
- "argument": [
- "user123"
], - "operator": "EQUALS",
- "property": "federationId"
}
}
}Response samples
- 200
- 403
- 410
- 503
{- "numberOfResults": 1,
- "@type": "QueryResult",
- "result": [
- {
- "@type": "AccountUserFederation",
- "id": "Ab0Cd1Ef1Gh3Ij4Kl5Mn6Op7Qr8St9Uv0Wx9Yz8Zy7Xw6Vu5Ts",
- "accountId": "account-123456",
- "userId": "user123@company.biz",
- "federationId": "user123"
}
]
}Retrieves additional results for an AccountUserFederation query
To learn about using queryMore, refer to the topic Query paging.
Authorizations:
Request Body schema: text/plainrequired
Responses
Response Schema:
| numberOfResults | integer <int32> |
| queryToken | string By default, the queryToken parameter is not available in the query response. It appears only when the query response contains more than 100 results. The maximum number of results returned per query is 100. To retrieve the next set of results, use the queryToken in the queryMore request. |
Array of objects (AccountUserFederation) |
Response samples
- 200
- 403
- 410
- 503
{- "numberOfResults": 1,
- "@type": "QueryResult",
- "result": [
- {
- "@type": "AccountUserFederation",
- "id": "Ab0Cd1Ef1Gh3Ij4Kl5Mn6Op7Qr8St9Uv0Wx9Yz8Zy7Xw6Vu5Ts",
- "accountId": "account-123456",
- "userId": "user123@company.biz",
- "federationId": "user123"
}
]
}Modifies or updates an AccountUserFederation object
Updates the federation ID of a specific user in a specific account.
Authorizations:
path Parameters
| id required | string |
Request Body schema: optional
| accountId | string The account ID. |
| federationId | string The federation ID uniquely identifies the user. |
| id | string The object’s conceptual ID, which is synthesized from the federation, user, and account IDs. |
| userId | string The user ID. |
Responses
Response Schema:
| accountId | string The account ID. |
| federationId | string The federation ID uniquely identifies the user. |
| id | string The object’s conceptual ID, which is synthesized from the federation, user, and account IDs. |
| userId | string The user ID. |
Request samples
- Payload
{- "accountId": "account-123456",
- "userId": "user123@company.biz",
- "federationId": "user456"
}Response samples
- 200
- 403
- 410
- 503
{- "@type": "AccountUserFederation",
- "id": "Ab0Cd1Ef1Gh3Ij4Kl5Mn6Op7Qr8St9Uv0Wx9Yz8Zy7Xw6Vu5Ts",
- "accountId": "account-123456",
- "userId": "user123@company.biz",
- "federationId": "user456"
}Deletes an AccountUserFederation object
Disables single sign-on for the user specified by the conceptual Account User Federation object ID.
Authorizations:
path Parameters
| id required | string |
Responses
Response samples
- 403
- 410
- 503
{- "message": "Access denied due to insufficient permissions."
}