---
title: "User login"
method: POST
path: "/gdc/account/login"
tags: ["login"]
---

# User login

`POST /gdc/account/login`

## Request

- Base URL: `https://secure.gooddata.com`
- URL: `https://secure.gooddata.com/gdc/account/login`
- Auth: none declared

Log in with GoodData credentials or SSO login.

## Request body

- PostUserLogin
  - `postUserLogin` object, required
    - `login` string, email, required
    - `password` string, required
    - `remember` union, required
      - '0' | '1': Validity of a token is specified by `remember`. If 1 (true) than generated SST will be valid for a very long time (typically one year).
      - 0 | 1: Validity of a token is specified by `remember`. If 1 (true) than generated SST will be valid for a very long time (typically one year).
      - boolean: Validity of a token is specified by `remember`. If 1 (true) than generated SST will be valid for a very long time (typically one year).
    - `verify_level` 0 | 1 | 2 | 3: Verification level specifies checks that are made against temporary token (that's generated for this SST): * Level 0 (default if ommited): Only cookie is checked, useful outside browser (API tools) * Level 1: Check cookie AND X-GDC-Auth header (cross-site request forgery protection in rich client) * Level 2: Only check the header (useful for multiple concurrent sessions in one browser session, where cookie storage is not thread-safe -- public dashboards) * Level 3: Used by gooddata backends, that need to access other DC's webapps (and need to store SST of those DCs). This SST can't be issued by the public login resource
    - `redirectUrl` string, nullable

## Response `200`

Login success

- UserLogin
  - `userLogin` object, required
    - `state` string, uri, required
    - `profile` string, uri, required
    - `token` string

## Other responses

- `400`: Bad request - User wasn't authenticated
- `401`: Unauthorized - User wasn't authenticated
- `403`: Forbidden - User was authenticated but wasnt verified or redirectUrl is not valid cross origin URL
- `415`: Unsupported media type
- `default`: Common error

---

[API](https://skmtc.dev/gooddata/apis/gooddata-api-documentation.md) - [All operations](https://skmtc.dev/gooddata/apis/gooddata-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/gooddata/apis/gooddata-api-documentation/revisions/e5dc0ee6ab00?raw)
