# OneLogin API API

> OneLogin API API on Apizie: 47 endpoints (Get Users, Create a User, Get a User, Update a User, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/business:onelogin/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `business:onelogin`
- Category: Business
- Status: byok
- Source: https://onelogin.com
- Page: https://apizie.tech/api/business/onelogin
- OpenAPI: https://apizie.tech/api/business/onelogin/openapi.json

This is an administrative API for OneLogin customers

## Endpoints

### Get Users
`GET https://apizie.tech/v1/business:onelogin/users-get-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| directory_id | integer | no |  |
| email | string | no |  |
| external_id | string | no |  |
| firstname | string | no |  |
| id | integer | no |  |
| manager_ad_id | integer | no |  |
| role_id | integer | no |  |
| samaccountname | string | no |  |
| since | string | no |  |
| until | string | no |  |
| username | string | no |  |
| userprincipalname | string | no |  |

### Create a User
`POST https://apizie.tech/v1/business:onelogin/users-create-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

### Get a User
`GET https://apizie.tech/v1/business:onelogin/users-get-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Update a User
`POST https://apizie.tech/v1/business:onelogin/users-update-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Delete a user account
`POST https://apizie.tech/v1/business:onelogin/users-delete-user-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Get User Apps
`GET https://apizie.tech/v1/business:onelogin/users-list-user-apps` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Get User Roles
`GET https://apizie.tech/v1/business:onelogin/users-get-user-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Assign Role to User
`POST https://apizie.tech/v1/business:onelogin/users-assign-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Remove Roles from User
`POST https://apizie.tech/v1/business:onelogin/users-remove-user-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Set the State for a user.
`POST https://apizie.tech/v1/business:onelogin/users-set-state` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Log a user out of any and all sessions
`POST https://apizie.tech/v1/business:onelogin/users-logout-user-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Lock a user account
`POST https://apizie.tech/v1/business:onelogin/users-lock-user-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Set a custom attribute
`POST https://apizie.tech/v1/business:onelogin/users-set-custom-attributes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Generate Temp MFA Token
`POST https://apizie.tech/v1/business:onelogin/users-generate-temp-mfa-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Get Custom Attributes
`GET https://apizie.tech/v1/business:onelogin/users-get-custom-attributes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |

### Set a the password for a user
`POST https://apizie.tech/v1/business:onelogin/users-set-password-clear-text-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Set a pre salted password for a user
`POST https://apizie.tech/v1/business:onelogin/users-set-pre-salted-password` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Authenticate a user
`POST https://apizie.tech/v1/business:onelogin/login-user-authentication` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| Custom-Allowed-Origin-Header-1 | string | no | Required for CORS requests only. Set to the Origin URI from which you are allowed to send a request using CORS. |
| body | object | no | JSON request body |

### Verify an MFA token
`POST https://apizie.tech/v1/business:onelogin/login-verify-factor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| Custom-Allowed-Origin-Header-1 | string | no | Required for CORS requests only. Set to the Origin URI from which you are allowed to send a request using CORS. |
| body | object | no | JSON request body |

### Generate SAML assertion
`POST https://apizie.tech/v1/business:onelogin/saml-generate-assertion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

### Verify an MFA token
`POST https://apizie.tech/v1/business:onelogin/saml-verify-factor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

### Get a list of MFA factors available to user
`GET https://apizie.tech/v1/business:onelogin/mfa-get-user-factors-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Get enrolled authentication factors
`GET https://apizie.tech/v1/business:onelogin/mfa-get-user-factors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |

### Enroll a user with a given authentication factor.
`POST https://apizie.tech/v1/business:onelogin/mfa-enroll-user-with-factor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| body | object | no | JSON request body |

### Activate an authentication factor
`POST https://apizie.tech/v1/business:onelogin/mfa-trigger-otp` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| device_id | integer | yes | Device ID |

### Verify an authentication factor
`POST https://apizie.tech/v1/business:onelogin/mfa-authenticate-otp` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| device_id | integer | yes | Device ID |
| body | object | no | JSON request body |

### Remove an authentication factor
`POST https://apizie.tech/v1/business:onelogin/mfa-remove-factor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | User ID |
| device_id | integer | yes | Device ID |

### Get Roles
`GET https://apizie.tech/v1/business:onelogin/roles-list-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | no |  |
| name | string | no |  |
| limit | integer | no |  |
| sort | string | no |  |
| fields | string | no |  |

### Get Role by ID
`GET https://apizie.tech/v1/business:onelogin/roles-get-role-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | Role ID |

### Get Events
`GET https://apizie.tech/v1/business:onelogin/events-list-filtered-events` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| client_id | string | no |  |
| created_at | string | no |  |
| directory_id | integer | no |  |
| event_type_id | integer | no |  |
| id | integer | no |  |
| resolution | string | no |  |
| since | string | no |  |
| until | string | no |  |
| user_id | integer | no |  |

### Get Event by ID
`GET https://apizie.tech/v1/business:onelogin/events-get-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | Event ID |

### Get Event Types
`GET https://apizie.tech/v1/business:onelogin/events-list-event-types` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |

### Get Groups
`GET https://apizie.tech/v1/business:onelogin/groups-get-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |

### Get Group by ID
`GET https://apizie.tech/v1/business:onelogin/groups-get-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | integer | yes | Group ID |

### Get Privileges
`GET https://apizie.tech/v1/business:onelogin/privileges-list-privileges` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |

### Creates privilege
`POST https://apizie.tech/v1/business:onelogin/privileges-create-privilege` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

### Get privilege
`GET https://apizie.tech/v1/business:onelogin/privileges-get-privilege-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |

### Update privilege
`POST https://apizie.tech/v1/business:onelogin/privileges-update-privilege-by-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |
| body | object | no | JSON request body |

### Delete privilege
`POST https://apizie.tech/v1/business:onelogin/privileges-delete-privilege` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |

### Get roles
`GET https://apizie.tech/v1/business:onelogin/privileges-get-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |

### Assign roles
`POST https://apizie.tech/v1/business:onelogin/privileges-assign-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |
| body | object | yes | JSON request body |

### Remove a role
`POST https://apizie.tech/v1/business:onelogin/privileges-remove-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |
| role_id | integer | yes | Role ID |

### Get privilege users
`GET https://apizie.tech/v1/business:onelogin/privileges-get-assigned-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |

### Assign users
`POST https://apizie.tech/v1/business:onelogin/privileges-assign-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |
| body | object | yes | JSON request body |

### Remove a user
`POST https://apizie.tech/v1/business:onelogin/privileges-remove-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| id | string | yes | Privilege ID |
| user_id | integer | yes | User ID |

### Generate Invite Link
`POST https://apizie.tech/v1/business:onelogin/invites-generate-link` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

### Send Invite Link
`POST https://apizie.tech/v1/business:onelogin/invites-send-invite-link` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The location of the OneLogin instance |
| body | object | no | JSON request body |

## Example
```
curl "https://apizie.tech/v1/business:onelogin/users-get-list" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the OneLogin API API?
Create a free Apizie key, then send GET https://apizie.tech/v1/business:onelogin/users-get-list with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the OneLogin API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. OneLogin API itself also needs your own key from api.{region}.onelogin.com.

### Can AI agents use the OneLogin API API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key business:onelogin.

### What is the status of the OneLogin API API?
Needs your own provider key (bring your own key)