BUILD

Organizations

Organizations are tenant boundaries for memberships, roles, policies, applications, domains, delegated administration, approvals, and audit events.

GET/api/organizations/{id}/federation/connections/{connection_id}/health

Run a read-only provider metadata preflight

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/federation/connections/{connection_id}/health'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

organization session + exact origin

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/auth/organizations

List session organizations

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/auth/organizations'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

browser session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations

List organizations for the session

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations

Create an organization

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}

Read an organization

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}

Update organization settings

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/members

List tenant-bound members

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/members'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/members/{member_id}

Update a member role or status

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/members/{member_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/members/{member_id}

Revoke a membership without deleting the user

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/members/{member_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/invitations

List tenant-bound invitations

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/invitations'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/invitations

Create an organization invitation

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/invitations'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/invitations/{invitation_id}

Resend an organization invitation

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/invitations/{invitation_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/invitations/{invitation_id}

Revoke an organization invitation

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/invitations/{invitation_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/invitations/accept

Accept an invitation

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/invitations/accept'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/delegated-admins

List delegated administrator grants

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin or delegated scope

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/delegated-admins

Create a scoped delegated administrator grant

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

Owner + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/delegated-admins/{delegation_id}

Revoke a delegated administrator grant

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins/{delegation_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/policies

List organization policies

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/policies

Create or update a policy, including optional session binding

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/policies

Update a policy, including optional session binding

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/policies/{policy_key}

Remove a policy and restore the default boundary

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/policies/{policy_key}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/groups

List organization groups

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/groups

Create an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/groups/{group_id}

Rename an organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups/{group_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/groups/{group_id}

Delete an empty organization group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups/{group_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/groups/{group_id}/members

List group members

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups/{group_id}/members'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/groups/{group_id}/members

Add a member to a group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups/{group_id}/members'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/groups/{group_id}/members/{membership_id}

Remove a member from a group

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/groups/{group_id}/members/{membership_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/roles

List roles and permissions

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/roles'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/roles

Create a custom role

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/roles'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/roles/{role_id}

Update a custom role

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/roles/{role_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/roles/{role_id}

Delete an unused custom role

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/roles/{role_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/applications

List application assignments

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/applications'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/applications

Assign an application

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/applications'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/applications/{application_id}

Disable an application assignment

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/applications/{application_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/domains

List organization domains

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/domains'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/domains

Register a DNS-verifiable domain

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/domains'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/domains/{domain_id}

Delete a domain record with active-federation protection

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/domains/{domain_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/domains/{domain_id}/verify

Verify a DNS TXT domain proof

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/domains/{domain_id}/verify'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/federation/connections

List organization federation metadata

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/federation/connections'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/federation/connections

Register federation metadata

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/federation/connections'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

PATCH/api/organizations/{id}/federation/connections/{connection_id}

Activate or disable federation metadata after bounded provider validation

This operation is part of the public Lucion Identity contract.

Safe request

curl -X PATCH 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/federation/connections/{connection_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/federation/connections/{connection_id}

Delete a disabled federation connection

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/federation/connections/{connection_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/lyra/actions

List schema-validated Lyra action catalog entries

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/lyra/actions

Register a schema-validated Lyra action

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/lyra/actions'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/audit-events

List tenant-bound audit events

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/audit-events'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

membership

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/approvals

List approval requests

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/approvals'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/approvals

Create an approval request

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/approvals'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up + idempotency recommended

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/approvals/{approval_id}

Approve or reject a request with independent admin step-up

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/approvals/YOUR_APPROVAL_ID'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

admin + step-up + separation of duties + idempotency recommended

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

GET/api/organizations/{id}/delegated-admins

List delegated administrator grants

This operation is part of the public Lucion Identity contract.

Safe request

curl -X GET 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin or delegated scope

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

POST/api/organizations/{id}/delegated-admins

Create a scoped delegated administrator grant

This operation is part of the public Lucion Identity contract.

Safe request

curl -X POST 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

Owner + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

DELETE/api/organizations/{id}/delegated-admins/{delegation_id}

Revoke a delegated administrator grant

This operation is part of the public Lucion Identity contract.

Safe request

curl -X DELETE 'https://identity.lucionglobal.com/api/organizations/YOUR_ID/delegated-admins/{delegation_id}'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

admin + step-up + idempotency

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation

Layer	Question it answers
User	Who is the person?
Membership	Which organization does the user belong to?
Role / permission	What may the member do?
Application	Which integration is acting?
Policy	What organization-level rule applies?
Scope	What API capability was granted?
Audit event	What happened, by whom, and in which tenant?

Verified domains use one-time DNS TXT proof values whose hashes are stored server-side. Domain registration and deletion are replay-safe; a verified domain cannot be deleted while an active federation connection exists.

Delegated administration is Owner-created, member-targeted, scope-limited, time-limited, revocable, and replay-safe. It never grants Owner status, creates a session, issues credentials, or bypasses organization policy and production gates.