Map Users to the Organization

Once you have set up an OpenID Connect (OIDC) Identity Provider, map the users stored in the Identity Provider to the OIDC Organization. For mapping, GoodData.CN uses the sub claim .

Map a User in the Identity Provider to the Organization

To map a user, submit a POST request to /api/entities/users.

Provide the value of the sub claim in the authenticationId attribute in the API request body:

You will have to provide the $GDC_API_TOKEN in the request header.

curl --request POST \
  --header "Authorization: Bearer $GDC_API_TOKEN" \
  --header 'Content-Type: application/vnd.gooddata.api+json' \
  --data '{
      "data": {
        "id": "john.doe",
        "type": "user",
        "attributes": {
          "authenticationId": "<user-sub-claim>"
        "relationships": {
          "userGroups": {
            "data": [ {
              "id": "adminGroup",
              "type": "userGroup"
            } ]

Once you have mapped the users to the Organization, create workspaces and set up their hierarchy .

For further details on user and user-groups see section User and UserGroups management .