How to get all users which is managed by identity providers?

[quyen's hoang]

How can I know which account is managed by Identify providers? 

Is there any REST API for this? Can I identify it by access_billable field in https://developer.atlassian.com/cloud/admin/organization/rest/api-group-orgs/#api-orgs-orgid-users-get

Thanks in advanced!

[Jimmy Seddon]

Hi @quyen's hoang,

Take a looks at the User Provisioning REST APIs:
https://developer.atlassian.com/cloud/admin/user-provisioning/rest/api-group-users/#api-scim-directory-directoryid-users-get

I'm pretty sure if you use the Get Users API it will only return those which are provisioned by your identity provider.

I hope that helps!

[quyen's hoang]

Thanks a lot for your answer!

For user provisioning REST APIs, it will need the directory id. If an organization have multiple directories, how can I get all directories id by REST API to get all users of each directory. 

Hope you have nice day!

[quyen's hoang]

Also, is Users managed by identity providers appears in admin.atlassian.net Directory -> Users and https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-users/#api-rest-api-3-user-bulk-get
I see that all users from this API have accountId and accountType, but the users returned from User Provision API don't have AccountId. 

I'm new here and I tried to find all documentation and still don't find the answers for this.

Thank you and sorry for this dump question. 

Look forward to hearing from you soon!

[Jimmy Seddon]

1) Getting the domains - You are going to want to check out the Get Domains in Organization API: https://developer.atlassian.com/cloud/admin/organization/rest/api-group-orgs/#api-orgs-orgid-domains-get

2) For the difference between the Jira & User Provisioning APIS - One is querying the user list in Jira where every user is assigned an accountID (a unique number that represents you Atlassian ID).  The User Provisioning APIs are interacting directly with your third party identity provider so you won't get an Atlassian accountId but you can get much more detailed information about each user.

[quyen's hoang]

1) Is it the same between domain Id and directory Id? 

2) I understand.

Thank you so much for your reply!

[Jimmy Seddon]

Yes I believe domain Id & directory Id are the same thing.

[quyen's hoang]

Thank you for this!

[Phong Nguyen - Atlassian Solutions Engineer]

Hi @quyen's hoang

Are you able to get the Directory ID or the domain ID to make it work?
I tried with the domain ID but it does not work.

[quyen's hoang]

@Phong Nguyen - Atlassian Solutions Engineer Hi, 
It is not able to get the Directory ID from the API. It can only see the Directory Id when you setup User provisioning or regenerate user provisioning API key if you have already setup

How to get API key and Directory Id:

- Go to admin.atlassian.com and navigate to Security > Identity Provider

- Click to an Identity Provider (a Directory)

- Scroll down and click “Regenerate API Key“ in User Provision section if you have already setup user provisioning or 'Set up provisioning' to if you haven't setup

[Phong Nguyen - Atlassian Solutions Engineer]

Thank you @quyen's hoang

I can find the Directory ID from the Identity Provider portal (Okta for my case). Thank you anyway.