Sign in

v1

latestOpenAPI 3.1.02026-07-24416405768.8 KB
b) Tenant Configuration & Onboarding

Create a tenant admin user

Creates an admin user for the tenant. For PKI authentication, generate a key pair with openssl and supply the base64-encoded public key.

post/eclipse-conductor/rest/v1/tenants/{tenantId}/admin-users

Path parameters

tenantIdinteger required

Request body

base64EncodedPublicKeystring

An optional PKI RSA public key for added security. If a public key is provided then the PKI login-challenges endpoint should be used to get a challenge to respond to as part of the login

emailstring

Users email address

firstNamestring

Customers middle name

identitystring required

Identity/username for authentication

lastNamestring required

Customers last/family name

passwordstring

Can be pre-hashed with BCRYPT or passed as clear text in which case Eclipse will hash it

phone1string required

Users primary phone number

positionsEclipseTenantPosition[]
ssoEnabledboolean

Indicates that this identity is purely for single sign on (e.g. SAML/OIDC) and cannot be used for authentication. If SSO is enabled then TOTP must be disabled and base64EncodedPublicKey and password should not be provided

totpEnabledboolean

Whether this identity will require a time base one time password when authenticating

userTypeIdinteger

Response

User created

adminUserIdinteger

Unique system generated identifier for an admin user

base64EncodedPublicKeystring

An optional PKI RSA public key for added security. If a public key is provided then the PKI login-challenges endpoint should be used to get a challenge to respond to as part of the login

emailstring

Users email address

firstNamestring

Customers middle name

identitystring required

Identity/username for authentication

lastNamestring required

Customers last/family name

phone1string required

Users primary phone number

positionsEclipseTenantPosition[]
ssoEnabledboolean

Indicates that this identity is purely for single sign on (e.g. SAML/OIDC) and cannot be used for authentication. If SSO is enabled then TOTP must be disabled and base64EncodedPublicKey and password should not be provided

totpEnabledboolean

Whether this identity will require a time base one time password when authenticating

totpQrCodestring

The QRCode which can be scanned with any RFC 6238 compliant App (E.g. Google Authenticator). Only provided in response to the enabling or resetting of TOTP

userTypeIdinteger