Get the SaaS identities no employee owns, across every application
Return, as a paginated list, the SaaS identities of your company that are linked to no employee and classified as no other kind of account — the identities the cockpit shows as “To link” — across every SaaS application at once, whatever its approval status. Each item carries its id, email, the saasId / saasName / approvalStatus of the application it is on, and syncedByIntegration.
Use it to review or clean up the accounts nobody owns: pass the ids to archiveSaasApplicationUsers or deleteSaasApplicationUsers, up to 100 per call. Up to 100 identities per page; read pagination.totalPages and page through the rest.
Archiving or deleting an identity whose syncedByIntegration is true does not remove the account: the next sync of the integration brings it back. Leave those out and tell the user to remove the accounts in the application itself; Primo drops them at its next sync.
Prefer it over calling getSaasById once per application: that returns every identity of one application with its entitlements, so finding the unlinked ones that way takes one call per application.
Authorizations
Use your Primo API key in the Authorization header as Bearer <API_KEY>.
Query Parameters
Pass false to keep only the identities on applications no integration syncs, true to keep only the others.
Keep only the identities of SaaS applications in this approval status.
TO_REVIEW, APPROVED, REJECTED Page number
Number of items per page (max 100)