GetIntegrationAccount

GET/api/v1/integrations/{integration}/accounts/{account}

Example request

US

curl \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  "https://us.oblique.security/api/v1/integrations/{integration}/accounts/{account}"

Set OBLIQUE_API_KEY to your API key.

Europe

curl \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  "https://eu.oblique.security/api/v1/integrations/{integration}/accounts/{account}"

Set OBLIQUE_API_KEY to your API key.

Path parameters

• namestringrequired

  Name of the account of the format integrations/{integration}/accounts/{account}.

Response

200IntegrationAccount

IntegrationAccount is a profile synced from an integration (such as Slack, GitHub, Okta or Google). One is recorded for every account the integration reports, whether or not it maps to a directory user. A user with profiles in many integrations has one IntegrationAccount per integration.

• namestring

  Assigned by Oblique.

• createTimestring (date-time)read-only

  Create and update timestamps.

• updateTimestring (date-time)read-only
• deleteTimestring (date-time)read-only

  The time when the account record stopped being tracked by Oblique. May differ from the delete time of the account in the external system.

• accountIdstringread-only

  The identifier the integration uses for this account (for example a Slack user ID). It is the account’s stable upsert key within the integration.

• userstringread-only

  The directory user this account maps to, matched on an identity field (such as email) where possible. Empty when no authoritative user matches.

• One of

  slack

  • slackSlackread-only
    • teamIdstringread-only

      The Slack team (workspace) the account belongs to.

    • emailstringread-only

      The account’s email, used to match a directory user.

    • isBotbooleanread-only

      Whether the account is a bot.

    • isDeletedbooleanread-only

      Whether the account is deactivated in Slack (disabled but still visible to the API).

    • workspaceRolestringread-only

      The account’s role in the workspace: “primary_owner”, “owner”, “admin” or “member”.

    • guestTypestringread-only
      Allowed values: SINGLE_CHANNEL, MULTI_CHANNEL

      Empty when the account is not a guest.

  github

  • githubGitHubread-only
    • loginstringread-only

      The GitHub login (username) of the account. A user can change their login at any time, so this is a mutable label rather than an identity: account_id holds the account’s global node ID, which never changes.

    • emailstringread-only

      The account’s email, when available. Used to match a directory user.

    • orgRolestringread-only

      The account’s role in the organization: “owner” or “member”.

    • twoFactorAuthenticationbooleanread-only

      Whether the account has two-factor authentication enabled.

    • samlNameIdstringread-only

      The SAML name ID of the account, populated when the organization uses SAML SSO (GitHub Enterprise Cloud only).

  okta

  • oktaOktaread-only
    • emailstringread-only

      The account’s primary email in Okta, which the directory user is matched on.

    • secondEmailstringread-only

      The account’s secondary email in Okta, when it has one.

  google

  • googleGoogleread-only
    • primaryEmailstringread-only

      The account’s primary email in Google Workspace, which the directory user is matched on.

    • suspendedbooleanread-only

      Whether the account is suspended in Google Workspace.

    • isAdminbooleanread-only

      Whether the account is a Google Workspace super admin.

  cloudflare

  • cloudflareCloudflareread-only
    • emailstringread-only

      The email the member was invited to the Cloudflare account under, which the directory user is matched on.

    • twoFactorAuthenticationbooleanread-only

      Whether the member has two-factor authentication enabled.

  notion

  • notionNotionread-only
    • emailstringread-only

      The account’s email in the Notion workspace, which the directory user is matched on.

  linear

  • linearLinearread-only
    • emailstringread-only

      The account’s email in the Linear workspace, which the directory user is matched on.

    • usernamestringread-only

      The account’s Linear username, the handle used to mention the account. For example “janedoe”.

  claudeConsole

  • claudeConsoleClaudeConsoleread-only
    • emailstringread-only

      The account’s email in the Anthropic organization, which the directory user is matched on.

  posthog

  • posthogPostHogread-only
    • emailstringread-only

      The account’s email in the PostHog organization, which the directory user is matched on.

    • twoFactorAuthenticationbooleanread-only

      Whether the account has two-factor authentication enabled.

  bamboohr

  • bamboohrBambooHRread-only
    • emailstringread-only

      The account’s email in BambooHR. It identifies the directory user only for an account BambooHR holds no employee for, since one it does is matched on employee_id.

      BambooHR resolves it in priority order from the employee’s work email, their home email, then the account’s own email.

      https://documentation.bamboohr.com/reference/list-users

    • employeeIdstringread-only

      The ID of the employee record this login account signs in as. Empty for an account BambooHR holds no employee for, such as one belonging to an outside administrator.

    • lastLoginTimestring (date-time)read-only

      The account’s most recent sign-in to BambooHR. Unset for an account that has never signed in.

• displayNamestringread-only

  Human-readable display name for this account, derived from the integration-specific profile.

Errors

Status	Meaning
400	Malformed request
401	Missing or invalid API key
403	Not allowed for this API key
404	Not found
429	Too many requests
500	Internal server error