Is there an endpoint that will allow me to change user details? I see endpoints in the API docs that get user information but nothing that will update user details. I have a webhook that will invoke the “user update” Foundry API endpoint once I find it. Is this possible? Or is there no documentation to update user details because this isn’t possible through the API?
Usually, the email comes in from the IdP through a SAML Mapping. If it’s updated in the IdP Foundry will pick it up automatically.
1 Like
Thanks @nicornk . That is our setup, but when our client organization changed their Active directory to send lower-cased email addresses when they used to send them in sentence-case, the users can’t log in (I suspect) because in foundry each user’s email address is sentence-cased. So I wanted to change the case of the email in Foundry to match what is coming in via SAML to test this theory and fix logins.
Taking a step back, though. As a secondary question, if the customer org changes the case of the email they send in, would that break authentication? Is Foundry auth case-sensitive? I hoped that whatever came in via IDP would overwrite what is pre-existing in Foundry if there’s a difference, but that might not be the case. Any info is appreciated, thank you!
It really depends on what was selected as user id in the initial mapping. If the team made the mistake to use the e-mail (which is never a good idea, e.g. people change their name) you are in a bad spot. I have the feeling this is the case for you.
Two options:
- you can use transformation rules on the IdP side to bring back the old user ids
- you take foundry offline and run a manual migration with some kind of admin account. I have never done this but I am pretty sure it’s possible with Palantir support.
The “offline” option is more feasible although still hard for us to do because of our non-standard install of Foundry…for example emails as user ids. I will look into this approach. Thanks.