---
title: "POST /endpoints/agents/psso/register/user/"
method: POST
path: "/endpoints/agents/psso/register/user/"
tags: ["endpoints"]
---

# POST /endpoints/agents/psso/register/user/

`POST /endpoints/agents/psso/register/user/`

## Request body

- AgentPSSOUserRegistrationRequest — Register Apple device user via Platform SSO
  - `user_auth` string, required
  - `user_secure_enclave_key` string, required
  - `enclave_key_id` string, required

## Response `200`

- UserSelf — User Serializer for information a user can retrieve about themselves
  - `pk` integer, required
  - `username` string, required — Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.
  - `name` string, required — User's display name.
  - `is_active` boolean, required — Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
  - `is_superuser` boolean, required
  - `is_current` boolean, required — Return whether this user owns the current browser session.
  - `groups` UserSelfGroups[], required
    - `name` string, required
    - `pk` string, required
  - `roles` UserSelfRoles[], required
    - `name` string, required
    - `pk` string, required
  - `email` string, email
  - `avatar` string, required — User's avatar, either a http/https URL or a data URI
  - `uid` string, required
  - `settings` object, required — Get user settings with brand and group settings applied
  - `type` 'internal' | 'external' | 'service_account' | 'internal_service_account'
  - `system_permissions` string[], required — Get all system permissions assigned to the user

## Other responses

- `400`
- `403`

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) · [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goauthentik/authentik/revisions/4e42e86021d7/schema)