User identities

Download AsyncAPI spec

Events emitted when user identities experience conflicts or are reassigned in a Qlik Cloud tenant. These events enable tracking of identity management operations and conflict resolution.

These events are available for consumption via:

Deprecation notice

These events are deprecated and will be removed on or after November 30, 2026.

Use the User identities events in the core namespace instead. For the full event mapping, see the deprecation notice.

Identity conflict

Published when attempting to create a user with an existing identity.

Payload

object
  • id string
    Required

    Identifies the event.

    minLength = 1

  • time string

    Timestamp of when the occurrence happened. Must adhere to RFC 3339.

    minLength = 1, format = "date-time"

  • type string
    Required

    The type of event.

    default = "com.qlik.user-identity.conflict"

  • source string
    Required

    Identifies the context in which an event happened.

    minLength = 1, format = "uri-reference"

  • specversion string
    Required

    The version of the CloudEvents specification which the event uses.

    minLength = 1

  • datacontenttype string

    Content type of the data value. Must adhere to RFC 2046 format.

    minLength = 1, default = "application/json"

  • userid string

    Unique identifier for the user triggering the event.

  • authtype string

    The type of principal that triggered the occurrence.

  • originip string

    Origin IP address.

  • tenantid string
    Required

    Unique identifier for the tenant related to the event.

  • sessionid string

    Unique identifier for the session related to the event.

  • authclaims string

    A JSON string representing claims of the principal that triggered the event

  • data object
    Required

    Data specific to the user identity conflict event.

    Show data properties
    • matchedUsers array of objects
      Required

      Array of matched user objects.

      Show matchedUsers properties
      • id string
        Required
      • email string
        Required
      • status string
        Required
      • subject string
        Required

com.qlik.user-identity.conflict

Example payload of the "Identity conflict" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.user-identity.conflict",
  "source": "com.qlik/my-service",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "605a18af2ab08cdbfad09259",
  "authtype": "service_account",
  "originip": "0.0.0.0",
  "tenantid": "TiQ8GPVr8qI714Lp5ChAAFFaU24MJy69",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\\\"iss\\\":\\\"qlik.api.internal/service\\\",\\\"sub\\\":\\\"service\\\",\\\"subType\\\":\\\"service\\\"}",
  "data": {
    "matchedUsers": [
      {
        "id": "LCkX6XCql7Owoea9HFfmxsMLxbnwd3pE",
        "email": "foo@bar.example",
        "status": "active",
        "subject": "auth0\\foo"
      },
      {
        "id": "FAkX2XCql4Owoea5HafmxsMLxbnwd3pE",
        "email": "foo@bar.example",
        "status": "active",
        "subject": "auth0\\bar"
      }
    ]
  }
}

Identity reassigned

Published when a user is assigned a new identity.

Payload

object
  • id string
    Required

    Identifies the event.

    minLength = 1

  • time string

    Timestamp of when the occurrence happened. Must adhere to RFC 3339.

    minLength = 1, format = "date-time"

  • type string
    Required

    The type of event.

    default = "com.qlik.user-identity.reassigned"

  • source string
    Required

    Identifies the context in which an event happened.

    minLength = 1, format = "uri-reference"

  • specversion string
    Required

    The version of the CloudEvents specification which the event uses.

    minLength = 1

  • datacontenttype string

    Content type of the data value. Must adhere to RFC 2046 format.

    minLength = 1, default = "application/json"

  • userid string

    Unique identifier for the user triggering the event.

  • authtype string

    The type of principal that triggered the occurrence.

  • originip string

    Origin IP address.

  • tenantid string
    Required

    Unique identifier for the tenant related to the event.

  • sessionid string

    Unique identifier for the session related to the event.

  • authclaims string

    A JSON string representing claims of the principal that triggered the event

  • data object
    Required

    Data specific to the user identity reassigned event.

    Show data properties
    • email string
      Required

      User's email used to reassign.

    • newSubject string
      Required

      User's new subject in our DB.

    • oldSubject string
      Required

      User's old subject in our DB.

com.qlik.user-identity.reassigned

Example payload of the "Identity reassigned" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.user-identity.reassigned",
  "source": "com.qlik/my-service",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "605a18af2ab08cdbfad09259",
  "authtype": "service_account",
  "originip": "0.0.0.0",
  "tenantid": "TiQ8GPVr8qI714Lp5ChAAFFaU24MJy69",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\\\"iss\\\":\\\"qlik.api.internal/service\\\",\\\"sub\\\":\\\"service\\\",\\\"subType\\\":\\\"service\\\"}",
  "data": {
    "email": "foo@corp.example",
    "newSubject": "okta\\bar",
    "oldSubject": "auth0\\foo"
  }
}