Visma Connect IdP serves as the identity provider for Visma, offering Single Sign-On (SSO), Two-Factor Authentication (2FA) and more across Visma applications and third-party services.

Connection instructions

Click 'Connect' in Flows and authorize access to your Visma Connect IdP account.

Actions

The application can perform the following actions:

Countries

Get countries

Get Countries

Tenants

Add a tenant

Adds a tenant organization and links it to the requesting client. The external_id attribute is used to link the tenant organization with an identifier from external system.

Add Application to a tenant

Adds an Application (application_id = client_id) to a tenant organization. Can be called by the client who created the Tenant OR by the Application itself if it is part of a Subscription and the Tenant-owner allows application self-activation in their Application Policy. The Application you want to add must grant your Tenant Owner App permission to do so in their Developer Portal => Application Policy => Authorization => Tenant Provisioning settings.

Delete Application from a tenant

Deletes an Application from a tenant organization. Can only be called by client who created the Tenant. Note: This also deletes all granted access for users for this application and tenant.

Get a tenant

Gets a specific Tenant by Tenant ID.

Get all Applications added to a tenant

Get all applications added to a tenant. It will also return inherited applications based on the is_inherited parameter. Can be called by any client with access to scope.

Get all applications linked to tenants in hierarchy

Get all applications (clients) linked to the specified tenant, its ancestor tenants, and its descendant tenants in the hierarchy.

Get all tenants managed by your application (the tenant owner)

Get all Tenants managed by your Application. Can only be called by client who created the Tenant.

Grant User Built-in Tenant Roles and Revoke all others

Grants user tenant roles and revokes existing ones for a tenant. Can only be called by client who created the Tenant.

Grant User Roles and Revoke all others for Application on Tenant

Grants user roles for applications on tenant. Can only be called by client who created the Tenant. This method revokes all existing roles set on the user except those sent in the request. To revoke all roles, send empty array.

Resume Application for a tenant

Resumes an Application (application_id = client_id) on a tenant organization. Can only be called by client who created the Tenant.

Search for tenants

Search for tenants using various attributes. Wildcard search with % (or *) allowed and query string must be URL encoded. As operator you can use "AND" or "OR" for filtering the search based on ANY or ALL attributes matched. When at least 2 search attributes are provided, the operator is required. Important notes for domain_name search: The search needs to be done via the full domain name, no wildcards are accepted. The search applies only to fully verified domains in Authentication Settings.

Suspend Application for a tenant

Suspends an Application (application_id = client_id) on a tenant organization. Can only be called by client who created the Tenant.

User Application Roles

Get user roles for application (not tenant-aware)

Get all assigned User Roles for an Application. No assigned roles returns empty array.

Users

Add user

Adds a user. User is linked to the calling Application.

Change EmailChangeAllowed attribute to be on or off

Allow or prevent the user from changing their email address

Change enforced 2-step authentication to be on or off

Enforce or remove 2-step authentication enforcement for the user

Get a User

Gets a user's details.

Get all Applications linked to User

Get all applications linked to User.

Search for users

Search for users using various attributes. Wildcard search with % (or *) allowed and query string must be URL encoded. As operator you can use "AND" or "OR" for filtering the search based on ANY or ALL attributes matched.

Unlink application from user account

Removes the association between a user and a client application