Create several SaaS identities directly, with no provisioning ticket

curl --request POST \
  --url https://api.getprimo.com/saas/{saasId}/identities/batch \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "items": [
    {
      "employeeId": "<string>",
      "email": "jsmith@example.com",
      "groups": [
        "<string>"
      ],
      "roles": [
        "<string>"
      ],
      "licenses": [
        "<string>"
      ],
      "organizationUnits": [
        "<string>"
      ]
    }
  ]
}
'

import requests

url = "https://api.getprimo.com/saas/{saasId}/identities/batch"

payload = { "items": [
        {
            "employeeId": "<string>",
            "email": "jsmith@example.com",
            "groups": ["<string>"],
            "roles": ["<string>"],
            "licenses": ["<string>"],
            "organizationUnits": ["<string>"]
        }
    ] }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    items: [
      {
        employeeId: '<string>',
        email: 'jsmith@example.com',
        groups: ['<string>'],
        roles: ['<string>'],
        licenses: ['<string>'],
        organizationUnits: ['<string>']
      }
    ]
  })
};

fetch('https://api.getprimo.com/saas/{saasId}/identities/batch', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.getprimo.com/saas/{saasId}/identities/batch",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'items' => [
        [
                'employeeId' => '<string>',
                'email' => 'jsmith@example.com',
                'groups' => [
                                '<string>'
                ],
                'roles' => [
                                '<string>'
                ],
                'licenses' => [
                                '<string>'
                ],
                'organizationUnits' => [
                                '<string>'
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.getprimo.com/saas/{saasId}/identities/batch"

	payload := strings.NewReader("{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.getprimo.com/saas/{saasId}/identities/batch")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.getprimo.com/saas/{saasId}/identities/batch")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "successCount": 0,
  "failureCount": 0,
  "results": [
    {
      "status": "ok",
      "errorCode": "<string>",
      "message": "<string>",
      "employeeId": "<string>",
      "email": "<string>",
      "id": "<string>"
    }
  ]
}

Saas

Create several SaaS identities directly, with no provisioning ticket

Record MULTIPLE accounts on a SaaS application Primo cannot provision itself — the batch form of createSaasIdentity, with the same rules per item. Use it to onboard a list of employees onto a manually-managed application in one call.

Same constraints as the single form: only an APPROVED application whose account creation is manual, employeeId to attach the account to an employee or email alone for an account no employee owns, and re-creating a recorded account updates it and keeps its employee.

Writes are independent and best-effort: the call returns 200 with a results manifest reporting ok / error per item — always inspect results rather than relying on the HTTP status to detect partial failures.

POST

saas

{saasId}

identities

batch

Create several SaaS identities directly, with no provisioning ticket

curl --request POST \
  --url https://api.getprimo.com/saas/{saasId}/identities/batch \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "items": [
    {
      "employeeId": "<string>",
      "email": "jsmith@example.com",
      "groups": [
        "<string>"
      ],
      "roles": [
        "<string>"
      ],
      "licenses": [
        "<string>"
      ],
      "organizationUnits": [
        "<string>"
      ]
    }
  ]
}
'

import requests

url = "https://api.getprimo.com/saas/{saasId}/identities/batch"

payload = { "items": [
        {
            "employeeId": "<string>",
            "email": "jsmith@example.com",
            "groups": ["<string>"],
            "roles": ["<string>"],
            "licenses": ["<string>"],
            "organizationUnits": ["<string>"]
        }
    ] }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    items: [
      {
        employeeId: '<string>',
        email: 'jsmith@example.com',
        groups: ['<string>'],
        roles: ['<string>'],
        licenses: ['<string>'],
        organizationUnits: ['<string>']
      }
    ]
  })
};

fetch('https://api.getprimo.com/saas/{saasId}/identities/batch', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.getprimo.com/saas/{saasId}/identities/batch",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'items' => [
        [
                'employeeId' => '<string>',
                'email' => 'jsmith@example.com',
                'groups' => [
                                '<string>'
                ],
                'roles' => [
                                '<string>'
                ],
                'licenses' => [
                                '<string>'
                ],
                'organizationUnits' => [
                                '<string>'
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.getprimo.com/saas/{saasId}/identities/batch"

	payload := strings.NewReader("{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.getprimo.com/saas/{saasId}/identities/batch")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.getprimo.com/saas/{saasId}/identities/batch")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"items\": [\n    {\n      \"employeeId\": \"<string>\",\n      \"email\": \"jsmith@example.com\",\n      \"groups\": [\n        \"<string>\"\n      ],\n      \"roles\": [\n        \"<string>\"\n      ],\n      \"licenses\": [\n        \"<string>\"\n      ],\n      \"organizationUnits\": [\n        \"<string>\"\n      ]\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "successCount": 0,
  "failureCount": 0,
  "results": [
    {
      "status": "ok",
      "errorCode": "<string>",
      "message": "<string>",
      "employeeId": "<string>",
      "email": "<string>",
      "id": "<string>"
    }
  ]
}

Key: Write Scope: Company

Authorizations

Authorization

string

header

required

Use your Primo API key in the Authorization header as Bearer <API_KEY>.

Path Parameters

saasId

string

required

Body

application/json

items

object[]

required

The identities to record, each carrying the same fields as createSaasIdentity. Up to 100 items per call, each employee or email at most once. Writes are best-effort: inspect the per-item results to learn which succeeded.

Required array length: 1 - 100 elements

Show child attributes

Response

default - application/json

successCount

integer

required

Number of identities created successfully.

Required range: -9007199254740991 <= x <= 9007199254740991

failureCount

integer

required

Number of identities that failed.

Required range: -9007199254740991 <= x <= 9007199254740991

results

object[]

required

Per-item outcome, in the same order as the input items.

Show child attributes

Getting Started

API Reference

Create several SaaS identities directly, with no provisioning ticket

Authorizations

Path Parameters

Body

Response