User identities

Download AsyncAPI spec

Events emitted when user identities experience conflicts or are reassigned in a Qlik Cloud tenant. These events enable tracking of identity management operations and conflict resolution.

These events are available for consumption via:

Deprecation notice

These events are deprecated and will be removed on or after November 30, 2026.

Use the User identities events in the core namespace instead. For the full event mapping, see the deprecation notice.

Identity conflict

Published when attempting to create a user with an existing identity.

Payload

object
  • idstring
    Required

    Identifies the event.

    minLength = 1

  • timestring

    Timestamp of when the occurrence happened. Must adhere to RFC 3339.

    minLength = 1, format = "date-time"

  • typestring
    Required

    The type of event.

    default = "com.qlik.user-identity.conflict"

  • sourcestring
    Required

    Identifies the context in which an event happened.

    minLength = 1, format = "uri-reference"

  • specversionstring
    Required

    The version of the CloudEvents specification which the event uses.

    minLength = 1

  • datacontenttypestring

    Content type of the data value. Must adhere to RFC 2046 format.

    minLength = 1, default = "application/json"

  • useridstring

    Unique identifier for the user triggering the event.

  • authtypestring

    The type of principal that triggered the occurrence.

  • originipstring

    Origin IP address.

  • tenantidstring
    Required

    Unique identifier for the tenant related to the event.

  • sessionidstring

    Unique identifier for the session related to the event.

  • authclaimsstring

    A JSON string representing claims of the principal that triggered the event

  • dataobject
    Required

    Data specific to the user identity conflict event.

    Show data properties
    • matchedUsersarray of objects
      Required

      Array of matched user objects.

      Show matchedUsers properties
      • idstring
        Required
      • emailstring
        Required
      • statusstring
        Required
      • subjectstring
        Required

com.qlik.user-identity.conflict

Example payload of the "Identity conflict" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.user-identity.conflict",
  "source": "com.qlik/my-service",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "605a18af2ab08cdbfad09259",
  "authtype": "service_account",
  "originip": "0.0.0.0",
  "tenantid": "TiQ8GPVr8qI714Lp5ChAAFFaU24MJy69",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\\\"iss\\\":\\\"qlik.api.internal/service\\\",\\\"sub\\\":\\\"service\\\",\\\"subType\\\":\\\"service\\\"}",
  "data": {
    "matchedUsers": [
      {
        "id": "LCkX6XCql7Owoea9HFfmxsMLxbnwd3pE",
        "email": "foo@bar.example",
        "status": "active",
        "subject": "auth0\\foo"
      },
      {
        "id": "FAkX2XCql4Owoea5HafmxsMLxbnwd3pE",
        "email": "foo@bar.example",
        "status": "active",
        "subject": "auth0\\bar"
      }
    ]
  }
}

Identity reassigned

Published when a user is assigned a new identity.

Payload

object
  • idstring
    Required

    Identifies the event.

    minLength = 1

  • timestring

    Timestamp of when the occurrence happened. Must adhere to RFC 3339.

    minLength = 1, format = "date-time"

  • typestring
    Required

    The type of event.

    default = "com.qlik.user-identity.reassigned"

  • sourcestring
    Required

    Identifies the context in which an event happened.

    minLength = 1, format = "uri-reference"

  • specversionstring
    Required

    The version of the CloudEvents specification which the event uses.

    minLength = 1

  • datacontenttypestring

    Content type of the data value. Must adhere to RFC 2046 format.

    minLength = 1, default = "application/json"

  • useridstring

    Unique identifier for the user triggering the event.

  • authtypestring

    The type of principal that triggered the occurrence.

  • originipstring

    Origin IP address.

  • tenantidstring
    Required

    Unique identifier for the tenant related to the event.

  • sessionidstring

    Unique identifier for the session related to the event.

  • authclaimsstring

    A JSON string representing claims of the principal that triggered the event

  • dataobject
    Required

    Data specific to the user identity reassigned event.

    Show data properties
    • emailstring
      Required

      User's email used to reassign.

    • newSubjectstring
      Required

      User's new subject in our DB.

    • oldSubjectstring
      Required

      User's old subject in our DB.

com.qlik.user-identity.reassigned

Example payload of the "Identity reassigned" event

{
  "id": "A234-1234-1234",
  "time": "2026-01-01T12:00:00Z",
  "type": "com.qlik.user-identity.reassigned",
  "source": "com.qlik/my-service",
  "specversion": "1.0",
  "datacontenttype": "application/json",
  "userid": "605a18af2ab08cdbfad09259",
  "authtype": "service_account",
  "originip": "0.0.0.0",
  "tenantid": "TiQ8GPVr8qI714Lp5ChAAFFaU24MJy69",
  "sessionid": "WZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "authclaims": "{\\\"iss\\\":\\\"qlik.api.internal/service\\\",\\\"sub\\\":\\\"service\\\",\\\"subType\\\":\\\"service\\\"}",
  "data": {
    "email": "foo@corp.example",
    "newSubject": "okta\\bar",
    "oldSubject": "auth0\\foo"
  }
}