Visma Connect IdP serves as the identity provider for Visma, offering Single Sign-On (SSO), Two-Factor Authentication (2FA) and more across Visma applications and third-party services.

Connection instructions

Click 'Connect' in Flows and authorize access to your Visma Connect IdP account.

Actions

The application can perform the following actions:

Search for tenants

Search for tenants using various attributes. Wildcard search with % (or *) allowed and query string must be URL encoded. As operator you can use "AND" or "OR" for filtering the search based on ANY or ALL attributes matched. When at least 2 search attributes are provided, the operator is required. Important notes for domain_name search: The search needs to be done via the full domain name, no wildcards are accepted. The search applies only to fully verified domains in Authentication Settings.

Change EmailChangeAllowed attribute to be on or off

Allow or prevent the user from changing their email address

Change enforced 2-step authentication to be on or off

Enforce or remove 2-step authentication enforcement for the user

Add user

Adds a user. User is linked to the calling Application.

Get a tenant

Gets a specific Tenant by Tenant ID.

Get countries

Get Countries

Unlink application from user account

Removes the association between a user and a client application

Get user roles for application (not tenant-aware)

Get all assigned User Roles for an Application. No assigned roles returns empty array.

Add Application to a tenant

Adds an Application (application_id = client_id) to a tenant organization. Can be called by the client who created the Tenant OR by the Application itself if it is part of a Subscription and the Tenant-owner allows application self-activation in their Application Policy. The Application you want to add must grant your Tenant Owner App permission to do so in their Developer Portal => Application Policy => Authorization => Tenant Provisioning settings.

Grant User Roles and Revoke all others for Application on Tenant

Grants user roles for applications on tenant. Can only be called by client who created the Tenant. This method revokes all existing roles set on the user except those sent in the request. To revoke all roles, send empty array.

Get all applications linked to tenants in hierarchy

Get all applications (clients) linked to the specified tenant, its ancestor tenants, and its descendant tenants in the hierarchy.

Get all Applications linked to User

Get all applications linked to User.

Delete Application from a tenant

Deletes an Application from a tenant organization. Can only be called by client who created the Tenant. Note: This also deletes all granted access for users for this application and tenant.

Add a tenant

Adds a tenant organization and links it to the requesting client. The external_id attribute is used to link the tenant organization with an identifier from external system.

Get a User

Gets a user's details.

Get all Applications added to a tenant

Get all applications added to a tenant. It will also return inherited applications based on the is_inherited parameter. Can be called by any client with access to scope.

Resume Application for a tenant

Resumes an Application (application_id = client_id) on a tenant organization. Can only be called by client who created the Tenant.

Search for users

Search for users using various attributes. Wildcard search with % (or *) allowed and query string must be URL encoded. As operator you can use "AND" or "OR" for filtering the search based on ANY or ALL attributes matched.

Suspend Application for a tenant

Suspends an Application (application_id = client_id) on a tenant organization. Can only be called by client who created the Tenant.