Generates a back-office SSO link for another user's highest eligible admin or system role.

Access: PEO full-admin users only.

The endpoint resolves the target user by email, selects the highest eligible admin or system role, and returns a back-office dashboard URL for that role.

When companyId is supplied, the controller prefers an admin role for that company. Employee-only roles are not eligible for this SSO flow.

The generated link is valid for 300 seconds by default unless expirationTime overrides the lifetime.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
string

Email of the user for whom the SSO link on-behalf-of user is created.

int32

If a company is specified, a SSO link with the Admin role for that company will be created if the user has such a login role.

int32
Defaults to 300

Requested SSO-link lifetime in seconds. The default is 300 seconds.

Headers
string
Defaults to 1.0

The requested API version

string
Defaults to 1.0

The requested API version

string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
jwt
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
text/json
text/plain