> ## Documentation Index
> Fetch the complete documentation index at: https://www.canva.dev/docs/admin/llms.txt
> Use this file to discover all available pages before exploring further.

# Find user

Finds a user in the caller's organization by exact email.

The email address is restricted data and is accepted only in the JSON request body. The
response contains zero or one user.

## HTTP method and URL path

POST https\://api.canva.com/admin/v1/users/find

## Authentication and authorization

This endpoint requires a valid access token that was generated using client credentials.

### Scopes

The access token must have all the following [scopes](/docs/admin/appendix/scopes) (permissions):

* `admin:user:read`

## Header parameters

<Prop.List>
  <Prop name="Authorization" type="string" required>
    Provides credentials to authenticate the request, in the form of a `Bearer` token.

    For example: `Authorization: Bearer {token}`
  </Prop>

  <Prop name="Content-Type" type="string" required>
    Indicates the media type of the information sent in the request. This must be set to `application/json`.

    For example: `Content-Type: application/json`
  </Prop>
</Prop.List>

## Body parameters

<Prop.List>
  <Prop name="email" type="string" required>
    The email address of the user to find.

    <Prop.Extras>
      **Minimum length:** `1`

      **Maximum length:** `254`
    </Prop.Extras>
  </Prop>
</Prop.List>

## Example request

Examples for using the `/v1/users/find` endpoint:

<Tabs storageKey="example.language" disableContentTransition>
  <Tab name="cURL">
    ```sh
    curl --request POST 'https://api.canva.com/admin/v1/users/find' \
    --header 'Authorization: Bearer {token}' \
    --header 'Content-Type: application/json' \
    --data '{
      "email": "drsmith@brightsmiledental.com"
    }'
    ```
  </Tab>

  <Tab name="Node.js">
    ```js
    const fetch = require("node-fetch");

    fetch("https://api.canva.com/admin/v1/users/find", {
      method: "POST",
      headers: {
        "Authorization": "Bearer {token}",
        "Content-Type": "application/json",
      },
      body: JSON.stringify({
        "email": "drsmith@brightsmiledental.com"
      }),
    })
      .then(async (response) => {
        const data = await response.json();
        console.log(data);
      })
      .catch(err => console.error(err));
    ```
  </Tab>

  <Tab name="Java">
    ```java
    import java.io.IOException;
    import java.net.URI;
    import java.net.http.*;

    public class ApiExample {
        public static void main(String[] args) throws IOException, InterruptedException {
            HttpRequest request = HttpRequest.newBuilder()
                .uri(URI.create("https://api.canva.com/admin/v1/users/find"))
                .header("Authorization", "Bearer {token}")
                .header("Content-Type", "application/json")
                .method("POST", HttpRequest.BodyPublishers.ofString("{\"email\": \"drsmith@brightsmiledental.com\"}"))
                .build();

            HttpResponse<String> response = HttpClient.newHttpClient().send(
                request,
                HttpResponse.BodyHandlers.ofString()
            );
            System.out.println(response.body());
        }
    }
    ```
  </Tab>

  <Tab name="Python">
    ```py
    import requests

    headers = {
        "Authorization": "Bearer {token}",
        "Content-Type": "application/json"
    }

    data = {
        "email": "drsmith@brightsmiledental.com"
    }

    response = requests.post("https://api.canva.com/admin/v1/users/find",
        headers=headers,
        json=data
    )
    print(response.json())
    ```
  </Tab>

  <Tab name="C#">
    ```csharp
    using System.Net.Http;

    var client = new HttpClient();
    var request = new HttpRequestMessage
    {
      Method = HttpMethod.Post,
      RequestUri = new Uri("https://api.canva.com/admin/v1/users/find"),
      Headers =
      {
        { "Authorization", "Bearer {token}" },
      },
      Content = new StringContent(
        "{\"email\": \"drsmith@brightsmiledental.com\"}",
        Encoding.UTF8,
        "application/json"
      ),
    };

    using (var response = await client.SendAsync(request))
    {
      response.EnsureSuccessStatusCode();
      var body = await response.Content.ReadAsStringAsync();
      Console.WriteLine(body);
    };
    ```
  </Tab>

  <Tab name="Go">
    ```go
    package main

    import (
    	"fmt"
    	"io"
    	"net/http"
    	"strings"
    )

    func main() {
    	payload := strings.NewReader(`{
    	  "email": "drsmith@brightsmiledental.com"
    	}`)

    	url := "https://api.canva.com/admin/v1/users/find"
    	req, _ := http.NewRequest("POST", url, payload)
    	req.Header.Add("Authorization", "Bearer {token}")
    	req.Header.Add("Content-Type", "application/json")

    	res, _ := http.DefaultClient.Do(req)
    	defer res.Body.Close()
    	body, _ := io.ReadAll(res.Body)
    	fmt.Println(string(body))
    }
    ```
  </Tab>

  <Tab name="PHP">
    ```php
    $curl = curl_init();
    curl_setopt_array($curl, array(
      CURLOPT_URL => "https://api.canva.com/admin/v1/users/find",
      CURLOPT_CUSTOMREQUEST => "POST",
      CURLOPT_RETURNTRANSFER => true,
      CURLOPT_HTTPHEADER => array(
        'Authorization: Bearer {token}',
        'Content-Type: application/json',
      ),
      CURLOPT_POSTFIELDS => json_encode([
        "email" => "drsmith@brightsmiledental.com"
      ])
    ));

    $response = curl_exec($curl);
    $err = curl_error($curl);
    curl_close($curl);

    if (empty($err)) {
      echo $response;
    } else {
      echo "Error: " . $err;
    }
    ```
  </Tab>

  <Tab name="Ruby">
    ```ruby
    require 'net/http'
    require 'uri'

    url = URI('https://api.canva.com/admin/v1/users/find')
    http = Net::HTTP.new(url.host, url.port)
    http.use_ssl = true

    request = Net::HTTP::Post.new(url)
    request['Authorization'] = 'Bearer {token}'
    request['Content-Type'] = 'application/json'
    request.body = <<REQUEST_BODY
    {
      "email": "drsmith@brightsmiledental.com"
    }
    REQUEST_BODY

    response = http.request(request)
    puts response.read_body
    ```
  </Tab>
</Tabs>

## Success response

If successful, the endpoint returns a `200` response with a JSON body with the following parameters:

<Prop.List>
  <Prop name="user" type="User" mode="output">
    A user.

    <PillAccordion title={<>Properties of <strong>user</strong></>} defaultExpanded={true}>
      <Prop.List>
        <Prop name="id" type="string" required mode="output">
          The user ID.
        </Prop>

        <Prop name="display_name" type="string" mode="output">
          The display name of the user.
        </Prop>

        <Prop name="email" type="string" mode="output">
          The email address of the user.
        </Prop>

        <Prop name="first_name" type="string" mode="output">
          The first name of the user.
        </Prop>

        <Prop name="last_name" type="string" mode="output">
          The last name of the user.
        </Prop>

        <Prop name="last_active_at" type="integer" mode="output">
          When the user was last active, as a Unix timestamp (in seconds since the Unix Epoch).
        </Prop>

        <Prop name="locale" type="string" mode="output">
          The locale of the user, as an IETF BCP 47 language tag.
        </Prop>

        <Prop name="role" type="string" mode="output">
          The role of the user in the organization.

          <Prop.Extras>
            **Available values:**

            * `admin`
            * `brand_designer`
            * `member`
          </Prop.Extras>
        </Prop>

        <Prop name="saml_account" type="SamlAccount" mode="output">
          The SAML account details used to link the user to the organization's identity provider for SSO.

          <PillAccordion title={<>Properties of <strong>saml_account</strong></>}>
            <Prop.List>
              <Prop name="idp_issuer" type="string" required mode="output">
                The issuer id or entity id of the SAML identity provider. Often a unique URL, but not always. Must resolve to an identity provider owned by the caller's organization.

                <Prop.Extras>
                  **Minimum length:** `1`
                </Prop.Extras>
              </Prop>

              <Prop name="name_id" type="string" required mode="output">
                The SAML NameID that identifies the user to the identity provider. This value is case sensitive, and shouldn't change.

                <Prop.Extras>
                  **Minimum length:** `1`
                </Prop.Extras>
              </Prop>
            </Prop.List>
          </PillAccordion>
        </Prop>
      </Prop.List>
    </PillAccordion>
  </Prop>
</Prop.List>

## Example responses

### Found user

```json
{
  "user": {
    "id": "UAAAAAAAAA1",
    "display_name": "Joe Smith",
    "email": "joe@acme.com",
    "first_name": "Joe",
    "last_name": "Smith",
    "last_active_at": 1750300000,
    "locale": "en",
    "role": "admin"
  }
}
```

### No matching user found

```json
{}
```

## Error responses

### 400 Bad Request

<Prop.List>
  <Prop name="code" type="string" required mode="output">
    A short string indicating what failed. This field can be used to handle errors programmatically. For a complete list of error codes, see [Error responses](/docs/admin/error-responses/).
  </Prop>

  <Prop name="message" type="string" required mode="output">
    A human-readable description of what went wrong.
  </Prop>
</Prop.List>

#### Example error response

```json
{
  "code": "string",
  "message": "string"
}
```