Describe an Identity

GET /directory/identities/{identity}

Describe an Identity

cURL

curl --request GET \
  --url https://wks-a1b2c3d4.provisionr.io/api/v1/directory/identities/{identity} \
  --header 'Authorization: Bearer <token>'

200

{
  "id": "<string>",
  "state": "staged",
  "vendor_id": "<string>",
  "email": "<string>",
  "profile": {},
  "timestamp": {
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z",
    "deleted_at": "2023-11-07T05:31:56Z",
    "provisioned_at": "2023-11-07T05:31:56Z",
    "deprovisioned_at": "2023-11-07T05:31:56Z",
    "profile_changed_at": "2023-11-07T05:31:56Z",
    "last_authenticated_at": "2023-11-07T05:31:56Z"
  },
  "count": {
    "workspace_logs_parent": 123,
    "workspace_logs_record": 123,
    "workspace_logs_related": 123
  },
  "included": {
    "workspace_integration": {
      "id": "<string>",
      "is_primary": true,
      "vendor": "demo",
      "handle": "<string>",
      "domain": "<string>"
    },
    "directory_user": {
      "id": "<string>",
      "state": "staged",
      "manager_id": "<string>",
      "is_manager": true,
      "full_name": "<string>",
      "email": "<string>",
      "username": "<string>",
      "org": {},
      "metadata": {}
    }
  },
  "links": {
    "self": "<string>",
    "workspace_integration": "<string>",
    "directory_user": "<string>"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

identity · string · required

Directory Identity ID

Response

200

application/json

DirectoryIdentityDetailedResponseData

id · string · required

Example:

"dridt_01hq8xyzabc123def456ghi789"

state · enum<string> · required

The state of the identity record (not the user)

staged The record is staged and is only visible to administrators or in the API. Since Directory Users are managed by Directory Identities with your primary integration, this usually indicates that the user is staged and will be activated or onboarded soon. Staged users are not included in ruleset manifests until they are active users.
active The record is active.
orphan The record is active but is not associated with a Directory User.
expiring The expires_at value is set in the future for the record. You can run the activate action to remove the scheduled expiration.
expired The expires_at value is in the past and the record was deactivated.
suspended The record is temporarily suspended. This reflects the state of the primary Workspace Integration.
deactivated The record was deactivated in the primary Workspace Integration.

Available options: staged, active, orphan, expiring, expired, suspended, deactivated

vendor_id · string · required

The ID of the user on the vendor API in its native format

email · string · required

The email address of the user in the vendor API. This is used for Directory User lookup matching

profile · object · required

The vendor API profile data (raw) that is imported. This likely contains sensitive PII. This endpoint requires directory.identity.view permission.

If you do not have permission, use the api/v1/directory/users?include=identities to get a nested list of identities for a user without the profile

Show child attributes

timestamp · DirectoryIdentityTimestampResponseData · object · required

The timestamps for the directory identity record

Show child attributes

count · object · required

Count of related records

Show child attributes

included · object · required

Included related resources

Show child attributes

links · object · required

API hyperlinks related to the directory identity record

Show child attributes