Get identity by filter
GET/intelligence/v1/identities
Requires tenant license idn:response-and-remediation.
Resolves exactly one identity by SCIM-style filters expression and returns the Intelligence envelope. Supported queryable fields are id and email only. The response embeds the first page of accounts, rare access, access-history access items, and access-history certifications. Paged slices include a next link only when more results exist. The privilegedAccess slice contains the full result and is not paged. The outliers slice is omitted when the tenant lacks the IDA-outliers license.
A single match returns HTTP 200 with IntelIdentityAggregate.
Zero matches returns HTTP 404 with detailCode IDC_IDENTITY_NOT_FOUND.
Multiple matches returns HTTP 409 with detailCode IDC_IDENTITY_AMBIGUOUS and candidates listing each match.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 409
- 429
- 500
Exactly one identity matched.
Missing or invalid filters.
Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.
Forbidden - Returned if the user you are running as, doesn't have access to this end-point.
No identity matched the filter.
Multiple identities matched the filter.
Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.
Upstream or internal failure.