---
title: "ezgh sso users"
description: "Directory users: the people who sign in at the portal."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh sso users

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh sso users <command>
```

Directory users are the people in the directory. They aren't console members: they sign in at the portal (https://&lt;alias&gt;.sso.ezgh.app) and to the organization's applications, never to the console. Users are given by ID, email or slug (usr\_…). A user an identity provider provisions over SCIM is locked while its SCIM token lives. EZGH policies are attached to directory users with `ezgh iam policies attach <policy> --sso-user <user>`.

Part of [`ezgh sso`](/cli/reference/sso).

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh sso users create`](/cli/reference/sso-users-create) | Create a hosted user, who gets an activation email |
| [`ezgh sso users delete`](/cli/reference/sso-users-delete) | Delete a directory user, ending their sessions and access |
| [`ezgh sso users get`](/cli/reference/sso-users-get) | Show a directory user, by ID, email or slug |
| [`ezgh sso users groups`](/cli/reference/sso-users-groups) | List the directory groups a user is in |
| [`ezgh sso users list`](/cli/reference/sso-users-list) | List the directory's users |
| [`ezgh sso users reactivate`](/cli/reference/sso-users-reactivate) | Reactivate a suspended user |
| [`ezgh sso users resend-activation`](/cli/reference/sso-users-resend-activation) | Send a pending user a new activation link |
| [`ezgh sso users reset-factors`](/cli/reference/sso-users-reset-factors) | Remove a user's password, TOTP and passkeys, and email them a link to set new ones |
| [`ezgh sso users sessions`](/cli/reference/sso-users-sessions) | List a user's live SSO sessions, newest first |
| [`ezgh sso users sign-out`](/cli/reference/sso-users-sign-out) | Sign a user out of every SSO session, and end their MCP clients' tokens |
| [`ezgh sso users suspend`](/cli/reference/sso-users-suspend) | Suspend a user: their sessions and tokens end, and they can't sign in |
| [`ezgh sso users update`](/cli/reference/sso-users-update) | Change a user's name, email or department |

Source: https://docs.ezghcloud.com/cli/reference/sso-users/index.mdx