---
title: "POST a User Under a Partner's SSO-Enabled Client Account"
method: POST
path: "/partner/accounts/{encoded_account_id}/users/sso"
tags: ["Technology Partners"]
---

# POST a User Under a Partner's SSO-Enabled Client Account

`POST /partner/accounts/{encoded_account_id}/users/sso`

## Request

- Base URL: `https://api.cc.email/v3`
- URL: `https://api.cc.email/v3/partner/accounts/{encoded_account_id}/users/sso`
- Auth: OAuth 2 and API key in header `x-api-key`
  - Implicit: `https://v3api-partner.auth.us-east-1.amazoncognito.com/oauth2/token`

Use this endpoint to create a new user under a partner client account that has the Single Sign On (SSO) for all users feature enabled.

## Path parameters

- `encoded_account_id` string, required

## Request body

- SSOUser: Specify client account user's details. All fields are required.
  - `first_name` string, required: The client account user's first name.
  - `last_name` string, required: The client account user's last name.
  - `role_name` string, required: The role (<code>account_manager</code> or <code>campaign_creator</code>) to assign the client account user.
  - `contact_email` string, required: The unique email address to associate with the new client account user.
  - `login_name` string, required: The login name to associate with the new client account user.
  - `external_id` string, required: The unique ID used to identify the client account user to the external authenticator.
  - `external_provider` string, required: The unique name used to identify the external provider used to authenticate the client account user. For a list of external providers, contact the Constant Contact Partner Team.

## Response `201`

Request successful.

## Other responses

- `400`: Bad request. Either the JSON was malformed or there was a data validation error.
- `401`: The Access Token used is invalid.
- `403`: Forbidden request. You lack the necessary scopes, you lack the necessary user privileges, or the application is deactivated.
- `409`: Conflict. The resource you are creating or updating conflicts with an existing resource.
- `500`: There was a problem with our internal service.

## Changes

- **2025-07-26** `2483585c5d89`: 3 info
  - the endpoint scheme security `ctctPartnerAuthorizer AND api_key` was added to the API
  - the endpoint scheme security `api_key` was removed from the API
  - the endpoint scheme security `ctctPartnerAuthorizer` was removed from the API
- **2024-09-09** `1bb1d071befb`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/cc/apis/appconnect-v3/changes/partner/accounts/:encoded_account_id/users/sso/post.md)

---

[API](https://skmtc.dev/cc/apis/appconnect-v3.md) - [All operations](https://skmtc.dev/cc/apis/appconnect-v3/llms.txt) - [OpenAPI document](https://skmtc.dev/cc/apis/appconnect-v3/revisions/7bcad1d0ff26?raw)