# API / SSO Employee Unique ID

**URL:** <https://devforum.zoom.us/t/api-sso-employee-unique-id/22460>\
**Category:** API and Webhooks\
**Created:** [June 26, 2020, 9:59am UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460 "2020-06-26T09:59:25Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jack0x539](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jack0x539/32/11357_2.png) [@jack0x539](https://devforum.zoom.us/u/jack0x539)\
**Post date:** [June 26, 2020, 9:59am UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/1 "2020-06-26T09:59:25Z")

</div>

My organisation wants to use SSO with pre-provisioned user accounts and maintain via the REST API: full control over timely updates and deletes.

Our email addresses are changeable-- we try not to, but it does happen. Due to this, we’d like to use the Employee Unique ID field for SSO, which we’d set to some unchanging attribute from our systems.

First question:  
Is it possible to set the value of a user’s employee unique ID field through the API?

Second question is:  
Should a user’s email address change, is it possible to query for that user via the API using whatever field is used to match against the Employee Unique ID field that SSO uses?  
While the API call to update a user’s email address looks simple enough, it relies on either knowing the old email address or knowing the user’s Zoom ID in order to target them with said update.

If I don’t have to, then I’d rather not have to store the user’s Zoom ID on our internal systems.

Does anyone have experience in confronting either of these scenarios?

Cheers  
Jack

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 30, 2020, 12:05am UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/2 "2020-06-30T00:05:08Z")

</div>

Hey @jack0x539,

> [@jack0x539](#):
>
> Is it possible to set the value of a user’s employee unique ID field through the API?

Are you referring to a [Zoom users userID](https://marketplace.zoom.us/docs/api-reference/zoom-api/users/user)? Could you share any docs so we are on the same page?

> [@jack0x539](#):
>
> Should a user’s email address change, is it possible to query for that user via the API using whatever field is used to match against the Employee Unique ID field that SSO uses?  
> While the API call to update a user’s email address looks simple enough, it relies on either knowing the old email address or knowing the user’s Zoom ID in order to target them with said update.

Yes, I would use the UserID to update if the email in your system changes frequently.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![jack0x539](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jack0x539/32/11357_2.png) [@jack0x539](https://devforum.zoom.us/u/jack0x539)\
**Post date:** [June 30, 2020, 7:59am UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/3 "2020-06-30T07:59:24Z")

</div>

Morning @tommy

The unique employee ID field is mentioned in the SAML mappings:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/4/4dacbdcff3ddd0926e933fb6b885b80f139d1ee0.png)

If I have to use the UserID then I will work around it – it just means that our internal systems have to record that UserID when we create a user.

Cheers  
Jack

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [July 1, 2020, 9:49pm UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/4 "2020-07-01T21:49:20Z")

</div>

Hey @jack0x539,

Here is an article that explains what the Employee Unique ID is:

> **[Setting up basic SAML mapping](https://support.zoom.us/hc/en-us/articles/115005888686-Setting-up-basic-SAML-mapping)**
>
> Overview
> Basic SAML Mapping allows you to designate a default User Type when users login to Zoom via SSO. You can also map specific SAML attributes being passed by your Identity Provider to email a...

For additional questions related to SSO, reach out to [support.zoom.us](http://support.zoom.us), they will be able to better assist.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![jack0x539](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jack0x539/32/11357_2.png) [@jack0x539](https://devforum.zoom.us/u/jack0x539)\
**Post date:** [July 2, 2020, 7:38am UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/5 "2020-07-02T07:38:29Z")

</div>

They’re ignored me thus far, but I shall try rephrasing my question to them 😉  
Thanks for trying @tommy !

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [July 6, 2020, 10:29pm UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/6 "2020-07-06T22:29:52Z")

</div>

Hey @jack0x539,

Yeah the wait times are a bit long from the support team right now.

Thanks for your patience,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 10:35pm UTC](https://devforum.zoom.us/t/api-sso-employee-unique-id/22460/7 "2020-08-21T22:35:14Z")

</div>


