Complete Onboarding

Atomically mint org + tenant + subscription + root user + default service account.

POST/api/v1/identity/dispatch

Request

curl -X POST "<BASE_URL>/api/v1/identity/dispatch" \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "X-CQRS-Action: COMPLETE_ONBOARDING" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "jordan.lee@example.com",
    "region": "US",
    "service_account_seed": 1
  }'

Authorization

Minimum role: ViewerThe caller must hold this role or a higher one.
Action: COMPLETE_ONBOARDING

Headers

AuthorizationstringRequired
Access token of the signed-in user, as a Bearer token. It identifies the user, their role and the workspace.
X-CQRS-ActionstringRequired
Names the command to run. Must be COMPLETE_ONBOARDING for this endpoint.
Content-TypestringRequired
Always application/json.
X-Idempotency-KeystringOptional
A key you choose that is unique to this attempt. A command repeated with the same key is not applied a second time.
X-Correlation-IdstringOptional
Your own identifier for the request. Returned in the x-correlation-id response header; generated when you leave it out.

Request body

emailemailRequired
No description yet.
regionenumRequired
Region the onboarding form picked (or defaulted to US). Drives the LocaleContext for the new tenant (cosmetic — currency, timezone).
Allowed values
- US
- EU
- APAC
service_account_seedintegerRequired
No description yet.
at least 0
addressobject or nullOptional
Legal/billing postal address — structured Address, written to the ORGANIZATION (AWS account contact / M365 org-profile pattern), never the user.
6 child fields
- citystringRequired
  No description yet.
- isoCountryCodestringRequired
  No description yet.
- street1stringRequired
  No description yet.
- postalCodestring or nullOptional
  No description yet.
- stateProvincestring or nullOptional
  No description yet.
- street2string or nullOptional
  No description yet.
company_domainstring or nullOptional
No description yet.
company_namestring or nullOptional
No description yet.
data_residency_regionenum or nullOptional
LEGAL data-residency pin. Set ONCE at tenant provision time; changing post-mint requires the admin-approved residency-transfer workflow (not a free UPDATE). Distinct from IdentityRegion which is purely cosmetic (currency, timezone, name order).
Allowed values
- US
- EU
- APAC
- CA
- UK
- AU
- IN
- SA
- BR
first_namestring or nullOptional
No description yet.
last_namestring or nullOptional
No description yet.
onboarding_tokenstringOptional
No description yet.
organization_namestring or nullOptional
No description yet.
password_hashstringOptional
No description yet.
slugstringOptional
No description yet.

Response

Status 202. The command was applied. The body reports the outcome and, where the command changes a record, that record's new state.

successbooleanRequired
true when the command was applied.
error_messagestringRequired
Empty when the command was applied.
projected_stateobjectOptional
The record as it stands after the command.
event_payloadobjectOptional
The event the command recorded.
insightsarray of objectOptional
Advisory notes about the result. Each has a code, a message and an impact number.

Errors

Every error carries an HTTP status. Where it also carries a code, branch on the code, not on the message.

400X-CQRS-Action is missing or names a command this route does not accept. Send COMPLETE_ONBOARDING.
400DOMAIN_ROUTINGThe body is not a valid command. Check the required fields and their types.
401The access token is missing, expired or not valid.
401L1_AUTHThe caller's role is below viewer or the caller has no access to this record.
403L1_POLICYA business rule refused the command. The message names the rule.
409L1_IDEMPOTENCYA command with this idempotency key was already applied.
409CONFLICTThe command would duplicate a record that must be unique.
500L3_COMMITThe command was valid but could not be saved.