Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.qflowhub.io/llms.txt

Use this file to discover all available pages before exploring further.

The Enterprise API is the surface for administering users inside an enterprise. It’s the API equivalent of the team-management screens in the Qflow dashboard, scoped to the calling user’s enterprise.

When to use it

  • Onboarding new staff — automated provisioning from your HR / SSO system into Qflow.
  • Bulk credential rotation — periodic password resets without manual dashboard work.
  • Username changes — when staff change names or email addresses.
  • Lookups — find users by id or email for downstream automation.

Concepts

  • Enterprise — a named group of users sharing branding and billing. Identified by an enterprise pin (a short string prefix).
  • User — an account inside an enterprise. Username format is {enterprisePin}/{email} for enterprise users; users without an enterprise have just the email.
  • Trust — separate from authentication. Some operations require the calling user to be marked trusted (KYC complete) — see Authentication.

Authentication

All endpoints use the standard OAuth bearer token flow against identity.qflowhub.io. See Authentication for token retrieval.

URL pattern

All Enterprise endpoints are routed through APIM at:
https://api.qflowhub.io/users/v1/api/<endpoint>
Every request requires both an OAuth bearer token AND an Ocp-Apim-Subscription-Key header — see Authentication.

What’s in scope

The Enterprise API covers user CRUD + credential management. Endpoints fall under the Users tag in the API reference.
DomainEndpoints
User CRUDGET /users/v1/api/user/{id}, GET /users/v1/api/users, GET /users/v1/api/users/email, POST /users/v1/api/user, PUT /users/v1/api/user, DELETE /users/v1/api/user
CredentialsPUT /users/v1/api/user/changepassword, PUT /users/v1/api/user/changeusername
LocaleGET /users/v1/api/user/translations
ReportingGET /users/v1/api/users/total
For full request/response details, see the auto-generated API Reference.

iFrame SSO (white-label embed)

Enterprise customers using Qflow’s white-label setup can embed the Qflow dashboard inside an iframe in their own portal and seamlessly sign their users in without a password prompt. See iFrame SSO for the encryption pattern + working code.