---
title: "Assign User to Application for SSO & Provisioning"
method: POST
path: "/api/v1/apps/{appId}/users"
tags: ["Application"]
---

# Assign User to Application for SSO & Provisioning

`POST /api/v1/apps/{appId}/users`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/apps/{appId}/users`
- Auth: API key in header `Authorization`

Assigns an user to an application with [credentials](#application-user-credentials-object) and an app-specific [profile](#application-user-profile-object). Profile mappings defined for the application are first applied before applying any profile properties specified in the request.

## Path parameters

- `appId` string, required

## Request body

- AppUser
  - `_embedded` object
  - `_links` object
  - `created` string, date-time
  - `credentials` AppUserCredentials
    - `password` AppUserPasswordCredential
      - `value` string, password
    - `userName` string
  - `externalId` string
  - `id` string
  - `lastSync` string, date-time
  - `lastUpdated` string, date-time
  - `passwordChanged` string, date-time
  - `profile` object
  - `scope` string
  - `status` string
  - `statusChanged` string, date-time
  - `syncState` string

## Response `200`

Success

- AppUser
  - `_embedded` object
  - `_links` object
  - `created` string, date-time
  - `credentials` AppUserCredentials
    - `password` AppUserPasswordCredential
      - `value` string, password
    - `userName` string
  - `externalId` string
  - `id` string
  - `lastSync` string, date-time
  - `lastUpdated` string, date-time
  - `passwordChanged` string, date-time
  - `profile` object
  - `scope` string
  - `status` string
  - `statusChanged` string, date-time
  - `syncState` string

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)