ezgh sso users <command>Directory users are the people in the directory. They aren’t console members: they sign in at the portal (https://<alias>.sso.ezgh.app) and to the organization’s applications, never to the console. Users are given by ID, email or slug (usr_…). A user an identity provider provisions over SCIM is locked while its SCIM token lives. EZGH policies are attached to directory users with ezgh iam policies attach <policy> --sso-user <user>.
Part of ezgh sso.
Flags
This command also takes the global flags.
Subcommands
| Command | Description |
|---|---|
ezgh sso users create |
Create a hosted user, who gets an activation email |
ezgh sso users delete |
Delete a directory user, ending their sessions and access |
ezgh sso users get |
Show a directory user, by ID, email or slug |
ezgh sso users groups |
List the directory groups a user is in |
ezgh sso users list |
List the directory’s users |
ezgh sso users reactivate |
Reactivate a suspended user |
ezgh sso users resend-activation |
Send a pending user a new activation link |
ezgh sso users reset-factors |
Remove a user’s password, TOTP and passkeys, and email them a link to set new ones |
ezgh sso users sessions |
List a user’s live SSO sessions, newest first |
ezgh sso users sign-out |
Sign a user out of every SSO session, and end their MCP clients’ tokens |
ezgh sso users suspend |
Suspend a user: their sessions and tokens end, and they can’t sign in |
ezgh sso users update |
Change a user’s name, email or department |