User.json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$id": "#User",
  "description": "A user account/login to access certain systems and/or services. Examples include okta-user, aws-iam-user, ssh-user, local-user (on a host), etc.",
  "type": "object",
  "allOf": [
    { "$ref": "#Entity" },
    {
      "properties": {
        "username": {
          "description": "Username",
          "type": "string"
        },
        "email": {
          "description": "The primary email address associated with the user account",
          "type": "string",
          "format": "email"
        },
        "emailDomain": {
          "description": "The domain portion of the email addresses associated with the user account.",
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "shortLoginId": {
          "description": "The shortened login Id. For example, if the username is the full email address (first.last@company.com), the shortLoginId would be the part before @ (first.last).",
          "type": "string"
        },
        "mfaEnabled": {
          "description": "Specifies whether multi-factor authentication (MFA) is enabled for this user.",
          "type": "boolean"
        },
        "mfaType": {
          "description": "Specifies what type of multi-factor authentication (MFA) is being used by this user.",
          "type": "string"
        },
        "active": {
          "description": "Specifies whether user account is active or disabled.",
          "type": "boolean"
        },
        "firstName": {
          "description": "The user's official first name in the system (such as HR database)",
          "type": "string"
        },
        "lastName": {
          "description": "The user's official last name in the system (such as HR database)",
          "type": "string"
        },
        "passwordChangedOn": {
          "description": "The timestamp (in milliseconds since epoch) of when the user's password was last rotated for this particular account.",
          "type": "number",
          "format": "date-time"
        }
      },
      "required": []
    }
  ]
}