The documentation says that to generate an API key for a non-admin users you have to disable SSO for the entire instance. Is there any other way to do this? Maybe through Fusion?
Thanks for the reply. To clarify, the goal was to create an API key without turning off SSO for the entire instance, not to automate the creation of API keys.
Given the documentation, I agree with you that creating an API key without turning off SSO for the entire instance does not seem possible. That said, it might be worth trying anyways: sometimes, the API has more latitude than does the user interface.
And to clarify my Great Responsibility comment, although it appears to be technically possible, I would not recommend using the API to automatically 1) turn off SSO, 2) create the API key(s), then 3) turn on SSO, as it is contrary to the intention of SSO.
This is interesting... I don't remember ever having to turn off SSO completely when needing to do an integration account. You do need to turn off "Only Allow SAML 2.0 Authentication" on the user level because they do need a username and password to get a key.
I usually, uncheck the box, give the account a temporary password, log in as the account to change the password to something permanent, and then create the API key.
But it has been awhile since I needed to create a new Integration account so maybe things have changed recently.
