> For the complete documentation index, see [llms.txt](https://fusionauth.io/docs/llms.txt) # Create a User and Registration (combined) API documentation for the FusionAuth Create a User and Registration (combined) API. # Create a User and Registration (combined) This API is used to create a new User and a User Registration in a single request. This is useful if for example you have a main website that User's create their account on initially. The User is technically creating their global User object and a User Registration for that website (i.e. that Application). In this case, you will want to create the User and the User Registration in a single step. This is the API to use for that. You can optionally still provide an Id for the new User on the URI. If you don't specify an Id for the User, FusionAuth will create one for you. ## Request [!API Key Authentication](https://fusionauth.io/docs/apis/authentication.md#api-key-authentication) Create a User and a User Registration in a single API call POST/api/user/registration/{userId} OpenAPI Spec ### Request Parameters `userId`UUIDoptionalImmutable The Id to use for the new User. If you don't specify this, FusionAuth will generate a random UUID. #### Request Headers `X-FusionAuth-TenantId`Stringoptional The unique Id of the tenant used to scope this API request. When only a single tenant is configured the tenant Id can be assumed and this additional header is optional. Once more than one tenant has been configured in FusionAuth the tenant Id is required for this request. The tenant Id may be provided through this header or by using a tenant locked API key to achieve the same result. See [Making an API request using a Tenant Id](https://fusionauth.io/docs/apis/authentication.md#making-an-api-request-using-a-tenant-id) for additional information. This request requires that you specify both the User object and the User Registration object in the request body. The fields for each are listed below. #### Request Body `disableDomainBlock`BooleanoptionalDefaults to falseAvailable since 1.30.0 A tenant has the option to configure one or more email domains to be blocked in order to restrict email domains during user create or update. Setting this property equal to `true` will override the tenant configuration. See **tenant.registrationConfiguration.blockedDomains** in the [Tenant API](https://fusionauth.io/docs/apis/tenants.md). `generateAuthenticationToken`BooleanoptionalDefaults to false Determines if FusionAuth should generate an Authentication Token for this registration. `registration.applicationId`UUIDrequired The Id of the Application that this registration is for. `registration.authenticationToken`Stringoptional The authentication token that may be used in place of the User's password when authenticating against this application represented by this registration. This parameter is ignored if **generateAuthenticationToken** is set to `true` and instead the value will be generated. `registration.data`Objectoptional An object that can hold any information about the User for this registration that should be persisted. `registration.preferredLanguages`Arrayoptional An array of locale strings that give, in order, the User's preferred languages for this registration. These are important for email templates and other localizable text. See [Locales](https://fusionauth.io/docs/reference/data-types.md#locales). The maximum number of allowed preferred languages is `20`. `registration.id`UUIDoptional The Id of this registration. If this is not specified, FusionAuth will create a random UUID for you. `registration.roles`Arrayoptional The list of roles that the User has for this registration. The string is the role's **Name** not the role's **Id**, e.g. `admin` or **user-role**. `registration.timezone`Stringoptional The User's preferred timezone for this Application registration. The format is not enforced, however it is recommended to use a timezone in the TZ format such as `America/Denver` or `US/Mountain`. `registration.username`Stringoptional The username of the User for this Application. This username cannot be used to login. It is for display purposes only. The **user.username** field may be used to login. `sendSetPasswordEmail`BooleanoptionalDefaults to falseDEPRECATED If `true`, FusionAuth will send the User an email asking them to set their password. The Email Template that is used is the one specified in the **setPasswordEmailTemplateId** . When you set this value to `true`, any provided **password** field is ignored. If you have also enabled email verification and do not skip verification with the **skipVerification** parameter, only the setup password email will be sent to the user. Setting up the password using the email sent during this user create operation will verify the User's email if it is not already verified. If the SMTP email configuration is not complete, or disabled, this value is ignored. Deprecated since 1.59.0 In version 1.59.0 and beyond, prefer the **sendSetPasswordIdentityType** field. `sendSetPasswordIdentityType`StringoptionalDefaults to doNotSendAvailable since 1.59.0 If set, FusionAuth will send the User a message asking them to set their password. When you set this value to anything but `doNotSend`, any provided **password** field is ignored. The possible values are: * `doNotSend` - Do not send a set password request. * `email` - The Email Template that is used is the one specified in the **setPasswordEmailTemplateId**. If the SMTP email configuration is not complete, or disabled, this value is ignored. * `phone` - The Message Template that is used is the one specified in the **setPasswordTemplateId**. If a Messenger is not selected in the **tenant.phoneConfiguration.messengerId** field, this value is ignored. note If you have also enabled phone or email verification and do not skip verification with the **skipVerification** parameter, only the setup password email or SMS message will be sent to the user. Setting up the password using the email or SMS sent during this user create operation will verify the User's email or phone number if it is not already verified. `skipRegistrationVerification`BooleanoptionalDefaults to false Indicates to FusionAuth that it should skip registration verification even if it is enabled for the Application. `skipVerification`BooleanoptionalDefaults to false Indicates to FusionAuth that it should skip email and phone verification, even if it is enabled. `user.birthDate`Stringoptional An `ISO-8601` formatted date of the User's birthdate such as `YYYY-MM-DD`. `user.data`Objectoptional An object that can hold any information about a User that should be persisted. `user.data.email`Stringoptional This field will be used as the email address if no **user.email** field is found. This field may be modified by advanced registration forms or the API. Setting this value to another account's email address allows that account to, in some cases, access information about this user. If user `richard` has a **user.data.email** with a value of `dinesh@fusionauth.io`, whoever controls `dinesh@fusionauth.io` has elevated access to the `richard` account. That user can now reset the password on the `richard` account, for example. This functionality may be useful in certain scenarios, such as when accounts must share an email address. Think through the security ramifications before using this feature. This feature was removed in version 1.26.0 and added back in in 1.27.2. `user.email`Stringoptional The User's email address. FusionAuth stores all email addresses in lowercase. Each email address must be unique. `user.encryptionScheme`Stringoptional The method for encrypting the User's password. The possible values are: * [salted-md5](https://fusionauth.io/docs/reference/password-hashes.md#salted-md5) * [salted-sha256](https://fusionauth.io/docs/reference/password-hashes.md#salted-sha-256) * [salted-hmac-sha256](https://fusionauth.io/docs/reference/password-hashes.md#salted-hmac-sha-256) * [salted-pbkdf2-hmac-sha256](https://fusionauth.io/docs/reference/password-hashes.md#salted-pbkdf2-hmac-sha-256) * [salted-pbkdf2-hmac-sha256-512](https://fusionauth.io/docs/reference/password-hashes.md#salted-pbkdf2-hmac-sha-256)Available since 1.34.0 * [bcrypt](https://fusionauth.io/docs/reference/password-hashes.md#salted-bcrypt) * [phpass-md5](https://fusionauth.io/docs/reference/password-hashes.md#phpass-md5)Available since 1.45.0 * [phpass-sha512](https://fusionauth.io/docs/reference/password-hashes.md#phpass-sha-512)Available since 1.45.0 You can also create your own password encryptor. See the [Custom Password Hashing](https://fusionauth.io/docs/extend/code/password-hashes/custom-password-hashing.md) section for more information. `user.expiry`Longoptional The expiration [instant](https://fusionauth.io/docs/reference/data-types.md#instants) of the User's account. An expired user is not permitted to login. `user.factor`Stringoptional The factor used by the password encryption scheme. If not provided, the `PasswordEncryptor` provides a default value. Generally this will be used as an iteration count to generate the hash. The actual use of this value is up to the `PasswordEncryptor` implementation. `user.firstName`Stringoptional The first name of the User. `user.fullName`Stringoptional The User's full name as a separate field that is not calculated from **firstName** and **lastName**. `user.imageUrl`Stringoptional The URL that points to an image file that is the User's profile image. `user.lastName`Stringoptional The User's last name. `user.legacyIdentifier`StringoptionalAvailable since 1.67Immutable Used to override the `sub` claim in tokens issued by the Legacy Identity Provider Adapter. This value is immutable after the user is created and must be unique within the tenant when non-null. `user.middleName`Stringoptional The User's middle name. `user.mobilePhone`Stringoptional The User's mobile phone number. This is useful to send the User push notifications or SMS messages. `user.password`Stringoptional The User's plain text password. This password will be hashed and the provided value will never be stored and cannot be retrieved. `user.passwordChangeRequired`BooleanoptionalDefaults to false Indicates that the User's password needs to be changed during their next login attempt. This does not apply if the user has no password. `user.preferredLanguages`Arrayoptional An array of locale strings that give, in order, the User's preferred languages. These are important for email templates and other localizable text. See [Locales](https://fusionauth.io/docs/reference/data-types.md#locales). The maximum number of allowed preferred languages is `20`. `user.timezone`Stringoptional The User's preferred timezone. The string must be in an [IANA](https://www.iana.org/time-zones) time zone format. For example: > `America/Denver` or `US/Mountain` `user.twoFactor.methods[x].authenticator.algorithm`Stringoptional The algorithm used by the TOTP authenticator. With the current implementation, this must be `HmacSHA1` if provided. Any other value will be ignored. `user.twoFactor.methods[x].authenticator.codeLength`Integeroptional The length of code generated by the TOTP. With the current implementation, this must be `6` if provided. Any other value will be ignored. `user.twoFactor.methods[x].authenticator.timeStep`Integeroptional The time-step size in seconds. With the current implementation, this must be `30` if provided. Any other value will be ignored. `user.twoFactor.methods[x].email`Stringoptional The value of the email address for this method. Only present if **user.twoFactor.methods\[x\].method** is `email`. `user.twoFactor.methods[x].method`Stringoptional The type of this method. There will also be an object with the same value containing additional information about this method. The possible values are: * `authenticator` * `email` * `sms` `user.twoFactor.methods[x].mobilePhone`Stringoptional The value of the mobile phone for this method. Only present if **user.twoFactor.methods\[x\].method** is `sms`. `user.twoFactor.methods[x].secret`Stringoptional A base64 encoded secret. This field is required when **method** is `authenticator`. `users.twoFactorDelivery`StringoptionalDefaults to NoneDEPRECATED The User's preferred delivery for verification codes during a two-factor login request. The possible values are: * `None` * `TextMessage` When using `TextMessage` the User will also need a valid `mobilePhone`. Removed in 1.26.0 `user.twoFactorEnabled`BooleanoptionalDefaults to falseDEPRECATED Determines if the User has two-factor authentication enabled for their account or not. See the [Enable Two-Factor](https://fusionauth.io/docs/apis/two-factor/enable-multi-factor.md) and [Disable Two-Factor](https://fusionauth.io/docs/apis/two-factor/disable-multi-factor.md) APIs as an alternative to performing this action using the User API. Removed in 1.26.0 `user.twoFactorSecret`StringoptionalDEPRECATED The Base64 encoded secret used to generate Two-Factor verification codes. You may optionally use value provided in the **secret** field returned by the [Two-Factor Secret](https://fusionauth.io/docs/apis/two-factor/generate-a-secret.md) API instead of generating this value yourself. Unless you are using `TextMessage` as your delivery type, ensure you are able to share the secret with the User before enabling Two-Factor authentication. Beginning in version 1.17.0, if you do create a User with `TextMessage` set as the `twoFactorDelivery` type and you omit this value, the secret will be generated for you. The secret can be generated because it is not necessary to share the secret with the User for this delivery method. When using `None` as the **twoFactorDelivery** this value will be required. Removed in 1.26.0 `user.username`Stringoptional The username of the User. `verificationIds`ArrayoptionalAvailable since 1.62.0 An array of strings generated to create a user with identities that have already been verified. note These `verificationIds`: * Must be created using the [Start Identity Verification API](https://fusionauth.io/docs/apis/identity-verify.md#start-identity-verification) with an **existingUserStrategy** of `mustNotExist` * Must have already completed verification using the [Complete Identity Verification API](https://fusionauth.io/docs/apis/identity-verify.md#complete-identity-verification) * Take precedence over the values in **user.email** and/or **user.phoneNumber**. The values in those fields must match those represented by the `verificationIds`. *Example Request JSON* ```json { "registration": { "applicationId": "10000000-0000-0002-0000-000000000001", "data": { "displayName": "Johnny", "favoriteSports": [ "Football", "Basketball" ] }, "id": "00000000-0000-0002-0000-000000000000", "insertInstant": 1446064706250, "lastLoginInstant": 1456064601291, "preferredLanguages": [ "en", "fr" ], "roles": [ "user", "community_helper" ], "timezone": "America/Chicago", "username": "johnny123", "usernameStatus": "ACTIVE" }, "disableDomainBlock": false, "sendSetPasswordEmail": false, "skipVerification": false, "user": { "birthDate": "1976-05-30", "data": { "displayName": "Johnny Boy", "favoriteColors": [ "Red", "Blue" ] }, "email": "example@fusionauth.io", "expiry": 1571786483322, "firstName": "John", "fullName": "John Doe", "id": "00000000-0000-0001-0000-000000000000", "imageUrl": "http://65.media.tumblr.com/tumblr_l7dbl0MHbU1qz50x3o1_500.png", "lastName": "Doe", "middleName": "William", "mobilePhone": "303-555-1234", "passwordChangeRequired": false, "preferredLanguages": [ "en", "fr" ], "timezone": "America/Denver", "twoFactor": { "methods": [ { "authenticator": { "algorithm": "HmacSHA1", "codeLength": 6, "timeStep": 30 }, "secret": "aGVsbG8Kd29ybGQKaGVsbG8gaGVsbG8=", "method": "authenticator" }, { "method": "sms", "mobilePhone": "555-555-5555" }, { "method": "email", "email": "example@fusionauth.io" } ] }, "usernameStatus": "ACTIVE", "username": "johnny123" } } ``` ## Response The response for this API contains the User and the User Registration that were created. Security sensitive fields will not be returned in the response. *Response Codes* | Code | Description | | --- | --- | | 200 | The request was successful. The response will contain a JSON body. | | 400 | The request was invalid and/or malformed. The response will contain an [Errors](https://fusionauth.io/docs/apis/errors.md) JSON Object with the specific errors. This status will also be returned if a paid FusionAuth license is required and is not present. | | 401 | You did not supply a valid Authorization header. The header was omitted or your API key was not valid. The response will be empty. See [Authentication](https://fusionauth.io/docs/apis/authentication.md). | | 500 | There was an internal error. A stack trace is provided and logged in the FusionAuth log files. The response will be empty. | | 503 | The search index is not available or encountered an exception so the request cannot be completed. The response will contain a JSON body. | #### Response Body `registration.applicationId`UUID The Id of the Application that this registration is for. `registration.authenticationToken`String The authentication token that may be used in place of the User's password when authenticating against this application represented by this registration. `registration.cleanSpeakId`UUID This Id is used by FusionAuth when the User's username for this registration is sent to CleanSpeak to be moderated (filtered and potentially sent to the approval queue). It is the **content Id** of the username inside CleanSpeak. `registration.data`Object An object that can hold any information about the User for this registration that should be persisted. `registration.id`UUID The Id of this registration. `registration.insertInstant`Long The [instant](https://fusionauth.io/docs/reference/data-types.md#instants) that this registration was created. `registration.lastLoginInstant`Long The [instant](https://fusionauth.io/docs/reference/data-types.md#instants) that the User last logged into the Application for this registration. `registration.preferredLanguages`Array An array of locale strings that give, in order, the User's preferred languages for this registration. These are important for email templates and other localizable text. See [Locales](https://fusionauth.io/docs/reference/data-types.md#locales). `registration.roles`Array The list of roles that the User has for this registration. The string is the role's **Name** not the role's **Id**, e.g. `admin` or **user-role**. `registration.timezone`String The User's preferred timezone. The string will be in an [IANA](https://www.iana.org/time-zones) time zone format. `registration.tokens`MapDEPRECATED A map that contains tokens returned from identity providers. For example, if this user has authenticated using the Facebook Identity Provider, the Facebook access token will be available in this map, keyed by name `Facebook`. For an OpenID Connect Identity provider, or other generic providers, if a token is stored it will be keyed by the Identity Provider unique Id. Removed in 1.28.0 The token returned and stored from the Identity Provider is now stored in the IdP link and is retrievable using the Identity Provider [Link API](https://fusionauth.io/docs/apis/identity-providers/links.md). `registration.username`String The username of the User for this Application. It is for display purposes only. `registration.verified`Boolean This value indicates if this User's registration has been verified. For additional information, see these tutorials: * [Email Verification](https://fusionauth.io/docs/lifecycle/manage-users/verification/gate-accounts-until-user-email-verified.md) * [Registration Verification](https://fusionauth.io/docs/lifecycle/manage-users/verification/registration-gate-accounts-until-verified.md) `registration.usernameStatus`String The current status of the username. This is used if you are moderating usernames via CleanSpeak. The possible values are: * `ACTIVE` - the username is active * `PENDING` - the username is pending approval/moderation * `REJECTED` - the username was rejected during moderation If a username has been rejected, it is still possible to allow the User to update it and have the new one moderated again. `user.birthDate`String The User's birthdate formatted as `YYYY-MM-DD` `user.breachedPasswordLastCheckedInstant`Long The [instant](https://fusionauth.io/docs/reference/data-types.md#instants) this user's password was last checked for inclusion in the set of known breached credentials. `user.breachedPasswordStatus`String Shows whether or not a user's password has been compromised, based on a comparison with a list of known breached passwords. May have any of the following values: * `None`: this password does not exist in the set of known breached passwords * `CommonPassword`: this account currently uses a commonly used password that exists repeatedly in the set of known breached passwords (e.g. `12345`) * `PasswordOnly`: this password exists in the set of known breached passwords, but the username does not * `ExactMatch`: this precise username and password combination exists in the set of known breached credentials * `SubAddressMatch`: some combination of an [subaddress](https://www.rfc-editor.org/rfc/rfc5233) of the user's email (e.g `myemail+subaddress@example.org`) and this password exists in the set of known breached credentials `user.cleanSpeakId`UUID This Id is used by FusionAuth when the User's username is sent to CleanSpeak to be moderated (filtered and potentially sent to the approval queue). It is the **content Id** of the username inside CleanSpeak. `user.data`Object An object that can hold any information about the User that should be persisted. `undefined.data.email`String This field will be used as the email address if no **.email** field is found. This feature was removed in version 1.26.0 and added back in 1.27.2. `user.email`String The User's email address. `user.expiry`Long The expiration [instant](https://fusionauth.io/docs/reference/data-types.md#instants) of the User's account. An expired user is not permitted to login. `user.firstName`String The first name of the User. `user.fullName`String The User's full name as a separate field that is not calculated from **firstName** and **lastName**. `user.id`UUID The User's unique Id. `user.imageUrl`String The URL that points to an image file that is the User's profile image. `user.lastLoginInstant`Long The [instant](https://fusionauth.io/docs/reference/data-types.md#instants) when the User logged in last. `user.lastName`String The User's last name. `user.legacyIdentifier`StringAvailable since 1.67 Used to override the `sub` claim in tokens issued by the Legacy Identity Provider Adapter. This value is immutable after the user is created and is unique within the tenant when non-null. `user.middleName`String The User's middle name. `user.mobilePhone`String The User's mobile phone number. This is useful to send the User push notifications or SMS messages. `user.passwordChangeRequired`Boolean Indicates that the User's password needs to be changed during their next login attempt. `user.passwordLastUpdateInstant`Long The [instant](https://fusionauth.io/docs/reference/data-types.md#instants) that the User last changed their password. note Since version 1.59.0, if a user does not currently have a password, this field will not be returned in the response. `user.preferredLanguages`Array An array of locale strings that give, in order, the User's preferred languages. These are important for email templates and other localizable text. See [Locales](https://fusionauth.io/docs/reference/data-types.md#locales). `user.timezone`String The User's preferred timezone. The string will be in an [IANA](https://www.iana.org/time-zones) time zone format. `user.twoFactor.methods[x].authenticator.algorithm`String The algorithm used by the TOTP authenticator. With the current implementation, this will always be `HmacSHA1`. `user.twoFactor.methods[x].authenticator.codeLength`Integer The length of code generated by the TOTP. With the current implementation, this will always be `6`. `user.twoFactor.methods[x].authenticator.timeStep`Integer The time-step size in seconds. With the current implementation, this will always be 30. `user.twoFactor.methods[x].email`String The value of the email address for this method. Only present if **user.twoFactor.methods\[x\].method** is `email`. `user.twoFactor.methods[x].id`String The unique Id of the method. `user.twoFactor.methods[x].lastUsed`Boolean `true` if this method was used most recently. `user.twoFactor.methods[x].method`String The type of this method. There will also be an object with the same value containing additional information about this method. The possible values are: * `authenticator` * `email` * `sms` `user.twoFactor.methods[x].mobilePhone`String The value of the mobile phone for this method. Only present if **user.twoFactor.methods\[x\].method** is `sms`. `user.twoFactorDelivery`StringDEPRECATED The User's preferred delivery for verification codes during a two-factor login request. The possible values are: * `None` * `TextMessage` Removed in 1.26.0 `user.twoFactorEnabled`BooleanDEPRECATED Determines if the User has two-factor authentication enabled for their account or not. Removed in 1.26.0 `user.username`String The username of the User. `user.usernameStatus`String The current status of the username. This is used if you are moderating usernames via CleanSpeak. The possible values are: * `ACTIVE` - the username is active * `PENDING` - the username is pending approval/moderation * `REJECTED` - the username was rejected during moderation If a username has been rejected, it is still possible to allow the User to update it and have the new one moderated again. `user.verified`Boolean Whether or not the User's email has been verified. For additional information, see these tutorials: * [Email Verification](https://fusionauth.io/docs/lifecycle/manage-users/verification/gate-accounts-until-user-email-verified.md) * [Registration Verification](https://fusionauth.io/docs/lifecycle/manage-users/verification/registration-gate-accounts-until-verified.md) `verificationIds`ArrayAvailable since 1.62.0 The list of all identity verifications that exist for a user. This includes the email and phone identities that a user may have. `verificationIds[x].id`StringAvailable since 1.62.0 An identity verification Id. When using `FormField` verification strategy, FusionAuth provides two values, a verification Id (this value) and the **verificationIds\[x\].oneTimeCode** value. When `ClickableLink` is the verification strategy, this is the value FusionAuth sends to the user in order to complete identity verification. If you have not configured SMTP or an SMS messenger, you may optionally use this value to use an out-of-band transport such as your own email service to deliver this value. Note that when `ClickableLink` is the verification strategy, this value is sensitive in that it can be used to verify the user's email address or phone number. `verificationIds[x].oneTimeCode`StringAvailable since 1.62.0 A one time code that will be paired with the **verificationIds\[x\].id**. When `FormField` is the verification strategy, this is the value FusionAuth sends to the user in order to complete verification. If you have not configured SMTP or an SMS messenger, you may optionally send this value using an out-of-band transport such as your own email service. This value will only be present when using the `FormField` verification strategy. When present, this is the value the user will need to enter to complete email or phone verification. `verificationIds[x].type`StringAvailable since 1.62.0 The identity type that the verification Id is for. This identity type, along with **verificationIds\[x\].value**, matches exactly one identity via **user.identities\[x\].type**. `verificationIds[x].value`StringAvailable since 1.62.0 The identity value that the verification Id is for. This identity value, along with **verificationIds\[x\].type**, matches exactly one identity via **user.identities\[x\].value**. *Example Response JSON* ```json { "refreshToken": "x7alP0xYDx86sPQfx01ERyai0DXAK1OzA8xUVvxRi_Gug3pfx2s4pg", "registration": { "applicationId": "10000000-0000-0002-0000-000000000001", "data": { "displayName": "Johnny", "favoriteSports": [ "Football", "Basketball" ] }, "id": "00000000-0000-0002-0000-000000000000", "insertInstant": 1446064706250, "lastLoginInstant": 1456064601291, "preferredLanguages": [ "en", "fr" ], "roles": [ "user", "community_helper" ], "timezone": "America/Chicago", "username": "johnny123", "usernameStatus": "ACTIVE", "verified": true, "verifiedInstant": 1698772159415 }, "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ikg3Q3hSNldtMDRUcm1zYXd0SF9BVkEwZTVaLS1UR1lUIn0.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.9IuprQIe2SGYWPV6nL_XNBEpb4XaTSBBxiyLAWtg4pg", "user": { "active": true, "birthDate": "1976-05-30", "data": { "displayName": "Johnny Boy", "favoriteColors": [ "Red", "Blue" ] }, "email": "example@fusionauth.io", "expiry": 1571786483322, "firstName": "John", "fullName": "John Doe", "id": "00000000-0000-0001-0000-000000000000", "imageUrl": "http://65.media.tumblr.com/tumblr_l7dbl0MHbU1qz50x3o1_500.png", "lastLoginInstant": 1471786483322, "lastName": "Doe", "middleName": "William", "mobilePhone": "303-555-1234", "passwordChangeRequired": false, "passwordLastUpdateInstant": 1471786483322, "preferredLanguages": [ "en", "fr" ], "timezone": "America/Denver", "tenantId": "f24aca2b-ce4a-4dad-951a-c9d690e71415", "twoFactor": { "methods": [ { "authenticator": { "algorithm": "HmacSHA1", "codeLength": 6, "timeStep": 30 }, "id": "35VW", "method": "authenticator" }, { "id": "V7SH", "method": "sms", "mobilePhone": "555-555-5555" }, { "email": "example@fusionauth.io", "id": "7K2G", "method": "email" } ] }, "usernameStatus": "ACTIVE", "username": "johnny123", "verified": true, "verifiedInstant": 1698772159415 }, "verificationIds": [ { "id": "Ej4b_sV9kLrh05KY3K6NDDVqh8f_TiRXWtuyilBHZ9s", "type": "email", "value": "example@fusionauth.io" } ] } ```