User Management with the User API

Staffbase supports several ways to manage users, as you can see in our Support Portal.

One way is to use the User API. You can use the User API alone or in conjunction with other methods. This article should give you an overview of the different lifecycle stages and where each User API endpoint is useful.

When you start working with our APIs it's always good to know how the API authentication works.

To work with the User API, it's helpful to understand the User object and its properties. A user has many properties that can be managed in different ways using User API.

As highlighted in the introduction, this article focuses on the User API. Other Onboarding methods are available in the above mentioned support article.

The User API can be used to manage all tasks around the user lifecycle.

Example of adding a new user:

Make a POST request to the /users endpoint and set the desired properties in the request body schema. In this case

• externalID The external unique identifier of the user. This can be used to identify the user in your system and is used to match the user when syncing with Staffbase.
• userName The username that can be used to log in to Staffbase. It must be unique.
• firstName Basic user information: first name
• lastName Basic user information: last name
• emails/primary The primary email address of the user. Used for the invitation email as well as password recovery. It must be unique. More information about types of user email fields in the Staffbase Platform.
• sendMail Set to true to send an invitation email via Staffbase

Copy To Clipboard
1export AUTH="Basic TOKEN"
2
3curl -X POST 'https://exampleapp.staffbase.com/api/users' \
4    -H 'Authorization: $AUTH' \
5    -H 'Content-Type: application/json' \
6--data-raw '{
7	"externalID": "MyUniqueExternalId",
8	"userName": "StaffbaseUsername",
9  "firstName": "Jane",
10  "lastName" : "Doe",
11  "emails/primary": "jane.doe@mycompany.com"
12  "sendMail" : true,
13}'

More examples of user creation via User API can be found on the following pages:

• Example create (POST) new users
• Invite new users

More actions can be found in the User API documentation.

Updating a user via the User API can have several aspects.

If you want to manage existing users, for example to update, work with recovery codes or retrieve group assignments, you can do this by using the User API.

Example are:

• Update User Profile Fields Using the User API
• Update the Avatar Using the User API
• Update the Content Language With the User API
• Sync Data to User Reference Input Type Using the User API

There may be situations where an even deeper integration is wanted.

Send recovery codes

For example, you could can send recovery codes for a user via the User API. This could be used in situations where you have a third-party service tool that your support desk uses to handle user requests for lost passwords:

• Send Recovery Code via User API

Log out users

Another supportive task might be to activly log out a user remotely from Staffbase. An example could be to log out all your SSO users to enforce a new login.

Simplfied, when users are using SSO and frequently use the app, they never get logged out. Learn more about Session Management.

If your policies require users to log in to Staffbase again when they change their SSO password or when their SSO password expired, you can force them to log out:

• Manage User Logout via the User API

Finally, there may be situations where users should no longer have access to Staffbase. For example, if users are no longer with your company. In this case you can either deactivate or delete the user.

• Offboard Users With the User API