Cloud Administration User Details API
4 days ago

Cloud Administration User Details API

The Cloud Administration User Details API enables Help Desk administrators to look up a single user without logging into the Cloud Administration Console. This API can look up only one user at a time.

Note:   Confirm that RSA has enabled SMS Tokencode and Voice Tokencode authentication for your company. Otherwise, the User Details API does not include the smsNumber and voiceNumber in the response.

For information about managing access to this API, see Accessing the Cloud Administration APIs.

Authentication

Clients calling this API must authenticate themselves by including a JSON Web Token in a request. For information on using this token, see Authentication for the Cloud Administration REST APIs.

Software Developer Kit

You can download the API Software Developer Kit (SDK) from Cloud Administration REST API Download.

Request Requirements

Use the following information to retrieve information about a particular user.

MethodRequest URLResponse Content TypeResponse BodyResponse Codes
POST /AdminInterface/restapi/v1/users/lookup
application/jsonUser details with property200, 400, 403, 404, 415, 429, 500

Example Request Data

The following example displays a request.

POST /AdminInterface/restapi/v1/users/lookup

Accept: application/json

Authorization: Bearer <JWT token>

Request Body Parameters

The following table describes the request parameters.

Request ParameterRequired?DescriptionType
emailNo
User's email address. Either email or username must be provided.String
usernameNoThe user's username. Either email or username must be provided.String
searchUnsynchedNoWhen set to True, Cloud Access Service (CAS) searches for the user with the specified email address. If the user is not yet synchronized to the cloud, synchronization occurs before results are returned. This process significantly increases the search time. The default value is False.Boolean

Example Request Body

{

"searchUnsynched" : "true",

"username" : "jschmoe",

“email” : “jschmoe@rsavia.com"

}

Example Response

The following example response shows the status of a single user on 31 May 2018:

{
    "id": "f85b6e95-f41f-45b4-bc84-559fead6460c",
    "emailAddress": "user.one@mycompany.com",
    "firstName": "User",
    "lastName": "One",
    "creationDate": "2018-08-31T19:10:30.045Z",
    "identitySource": "My Company AD",
    "userStatus": "Enabled",
    "markDeleted": false,
    "highRiskUser": false,
    "markDeletedAt": null,
    "markDeletedBy": null,
    "smsNumber": "+11235556799",
    "voiceNumber": "+1 774 291 4444",
    "isTokenLocked": false,
    "isSmsLocked": false,
    "isVoiceLocked": false,
    "lastSyncTime": "2018-08-31T19:20:30.045Z",
    "emergencyAccessStatus": "Disabled",
    "emergencyTokencodeId": null,
    "emergencyTokencodeExpiration": null,
    "emergencyTokencodeLastUse": null,
    "offlineEmergencyAccessStatus": "Disabled",
    "offlineEmergencyTokencodeExpiration": null,
    "monthLastAuthenticated": "Nov 2020",
    "identitySourceSpecificGroups": [
        "Group 1",
        "Group 2"
    ],
    "globalGroups": [
        "Group 3"
    ]
}

Response Property Descriptions

The following table shows property descriptions and data types.

PropertyDescriptionData Type
idIdentifies the user.String
emailAddressUser's email address.String
firstNameUser's first name.String
lastNameUser's last name.String
creationDate

Date when the user account was added to CAS.
See https://www.w3.org/TR/NOTE-datetime

for information on formatting timestamps in ISO 8601 format.
String
identitySourceName of identity source.String
userStatus

Enabled. Users can access protected resources.

Disabled. Users cannot access protected resources or register devices.

Pending Deletion. The user and all associated data and devices are automatically deleted from CAS seven days after being marked for deletion in the Cloud Administration Console.

String
markDeletedIndicates whether the user is marked deleted.Boolean
markDeletedAtDate when a user is marked deleted.
See https://www.w3.org/TR/NOTE-datetime .
String
markDeletedByAdministrator who initiated mark for delete.String
lastSuccessfulAuthenticationMethodSpecifies the authentication method(s) the user last used successfully. String
lastSuccessfulAuthenticationDateShows the date and time when the user was last successfully authenticated.String
smsNumberDisplays user phone numbers after you click Show synchronized phone numbers. Phone numbers appear only if corresponding attributes were configured and synchronized. String
voiceNumberDisplays user voice phone numbers after you click Show synchronized phone numbers. Phone numbers appear only if corresponding attributes were configured and synchronized.String
isTokenLockedToken locked status is either true (locked) or false (unlocked).Boolean
isSmsLockedSMS phone locked status is either true (locked) or false (unlocked).Boolean
isVoiceLocked

Voice phone locked status is either true (locked) or false (unlocked).

Boolean
lastSyncTimeMost recent time when user details were synchronized with an identity source.
See https://www.w3.org/TR/NOTE-datetime for information on formatting timestamps in ISO 8601 format.
String
highRiskUser

True indicates the user is marked as high risk by an external third-party application. False indicates the user is not marked as high risk by an external third-party application.

Boolean
emergencyAccessStatus

Enabled - An Emergency Tokencode has been generated for this user.

Disabled - An Emergency Tokencode has not been generated for this user.

Locked - Emergency Tokencode is locked for this user.

String
emergencyTokencodeIdIdentifies the Emergency Tokencode, if one has been generated for this user.String
emergencyTokencodeExpirationEmergency Tokencode expiration date.String
emergencyTokencodeLastUseEmergency Tokencode last used date.String
emergencyTokencodeOneTimeUseTrue indicates that an Emergency Tokencode can be used only once. False indicates that an Emergency Tokencode can be used multiple times.Boolean
offlineEmergencyTokencodeExpirationOffline Emergency Tokencode expiration date.String
offlineEmergencyAccessStatus

Enabled - An offline Emergency Tokencode has been generated for this user.

Disabled - An offline Emergency Tokencode has not been generated for this user.

String
monthLastAuthenticatedMonth the user last authenticated. Returns null if not applicable, or a date in MMM/YYYY format. String
identitySourceSpecificGroups

Names of identity source groups that the user belongs to.

Array of strings
globalGroupsNames of CAS groups (local groups) that the user belongs to.Array of strings

 

Response Codes

The following table shows the response codes and their descriptions for the User Details API.

CodeDescription
200User is successfully found.
400User ID not provided as parameter.
403Not authorized to perform the request.
404User is not found.
415 Unsupported media type (must be JSON).
429Too many requests.
500Internal error occurred when processing the request.