GetIntegrationAccount

GET/api/v1/integrations/{integration}/accounts/{account}

Example request

US
Europe

curl \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  "https://us.oblique.security/api/v1/integrations/{integration}/accounts/{account}"

Set OBLIQUE_API_KEY to your API key.

curl \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  "https://eu.oblique.security/api/v1/integrations/{integration}/accounts/{account}"

Set OBLIQUE_API_KEY to your API key.

Path parameters

namestringrequired
Name of the account of the format integrations/{integration}/accounts/{account}.

Response

200IntegrationAccount

IntegrationAccount is a profile synced from an integration (such as Slack, GitHub, Okta or Google). One is recorded for every account the integration reports, whether or not it maps to a directory user. A user with profiles in many integrations has one IntegrationAccount per integration.

namestring
Assigned by Oblique. Name of the account, of the format integrations/{integration}/accounts/{account}.
createTimestring (date-time)read-only
Create and update timestamps.
updateTimestring (date-time)read-only
deleteTimestring (date-time)read-only
The time when the account record stopped being tracked by Oblique. May differ from the delete time of the account in the external system.
accountIdstringread-only
The identifier the integration uses for this account (for example a Slack user ID). It is the account’s stable upsert key within the integration.
userstringread-only
The directory user this account maps to, matched on an identity field (such as email) where possible. Empty when no authoritative user matches.
One of
- slackSlackread-only
  teamIdstringread-only
  The Slack team (workspace) the account belongs to.
  emailstringread-only
  The account’s email, used to match a directory user.
  isBotbooleanread-only
  Whether the account is a bot.
  isDeletedbooleanread-only
  Whether the account is deactivated in Slack (disabled but still visible to the API).
  workspaceRolestringread-only
  The account’s role in the workspace: “primary_owner”, “owner”, “admin” or “member”.
  guestTypestringread-only
  Allowed values: SINGLE_CHANNEL, MULTI_CHANNEL
  Empty when the account is not a guest.
- githubGitHubread-only
  loginstringread-only
  The GitHub login (username) of the account. A user can change their login at any time, so this is a mutable label rather than an identity: account_id holds the account’s global node ID, which never changes.
  emailstringread-only
  The account’s email, when available. Used to match a directory user.
  twoFactorAuthenticationbooleanread-only
  Whether the account has two-factor authentication enabled.
  samlNameIdstringread-only
  The SAML name ID of the account, populated when the organization uses SAML SSO (GitHub Enterprise Cloud only).
  displayNamestringread-only
  The name on the account’s GitHub profile, for example “Jane Doe”. Empty when the user has not set one.
- oktaOktaread-only
  emailstringread-only
  The account’s primary email in Okta, which the directory user is matched on.
  secondEmailstringread-only
  The account’s secondary email in Okta, when it has one.
- googleGoogleread-only
  primaryEmailstringread-only
  The account’s primary email in Google Workspace, which the directory user is matched on.
  isAdminbooleanread-only
  Whether the account is a Google Workspace super admin.
- cloudflareCloudflareread-only
  emailstringread-only
  The email the member was invited to the Cloudflare account under, which the directory user is matched on.
- notionNotionread-only
  emailstringread-only
  The account’s email in the Notion workspace, which the directory user is matched on.
- linearLinearread-only
  emailstringread-only
  The account’s email in the Linear workspace, which the directory user is matched on.
  usernamestringread-only
  The account’s Linear username, the handle used to mention the account. For example “janedoe”.
- claudeConsoleClaudeConsoleread-only
  emailstringread-only
  The account’s email in the Anthropic organization, which the directory user is matched on.
- posthogPostHogread-only
  emailstringread-only
  The account’s email in the PostHog organization, which the directory user is matched on.
- bamboohrBambooHRread-only
  emailstringread-only
  The account’s email in BambooHR. It identifies the directory user only for an account BambooHR holds no employee for, since one it does is matched on employee_id.
  
  BambooHR resolves it in priority order from the employee’s work email, their home email, then the account’s own email.
  
  https://documentation.bamboohr.com/reference/list-users
  employeeIdstringread-only
  The ID of the employee record this login account signs in as. Empty for an account BambooHR holds no employee for, such as one belonging to an outside administrator.
  lastLoginTimestring (date-time)read-only
  The account’s most recent sign-in to BambooHR. Unset for an account that has never signed in.
- rampRampread-only
  emailstringread-only
  The account’s email in Ramp, which the directory user is matched on.
- tailscaleTailscaleread-only
  loginNamestringread-only
  The name the user signs in to Tailscale with, which is usually their email and is what the directory user is matched on.
- onepasswordOnePasswordread-only
  emailstringread-only
  The account’s email in 1Password, which the directory user is matched on.
- gongGongread-only
  emailstringread-only
  The account’s email in Gong, which the directory user is matched on.
displayNamestringread-only
Human-readable display name for this account, derived from the integration-specific profile.
secondFactorstringread-only
Allowed values: ENABLED, DISABLED
Whether the account signs in with a second factor, as reported by the integration that owns it.

Errors

Status	Meaning
`400`	Malformed request
`401`	Missing or invalid API key
`403`	Not allowed for this API key
`404`	Not found
`429`	Too many requests
`500`	Internal server error