# recordCrossIntegrationIdentityMapping

Source: /openapi/thomas-federated.openapi.json

## Operation

| Method | URL |
|---|---|
| POST | https://cxi-api-prod-weu-interim-eraffmdbdmdmbdfz.a01.azurefd.net/v1/partner-identity-mappings |

| Field | Value |
|---|---|
| operationId | recordCrossIntegrationIdentityMapping |
| method | POST |
| server | https://cxi-api-prod-weu-interim-eraffmdbdmdmbdfz.a01.azurefd.net/v1 |
| path | /partner-identity-mappings |
| tags | `Partner access governance` |
| summary | Record that one retained person spans two Partner integrations |
| badges | None |

## Request Parameters

None.

## Request Body

| Content type | Schema refs |
|---|---|
| application/json | #/components/schemas/CrossIntegrationIdentityMapDto |

## Responses

| Status | Description | Schema refs |
|---|---|---|
| 201 | The stored mapping: both integrations, the retained identity, the acting human, the reason, the evidence and the instant. Carries no scope, no role, no external reference and no secret. | #/components/schemas/CrossIntegrationIdentityMapResultDto |
| 400 | The body is malformed: an unknown key was supplied, an id is not a UUID, the two integrations are the same, or the reason or evidence falls outside the 10-1000 character bound | #/components/schemas/ApiErrorResponseDto |
| 401 | Invalid or missing authentication token (AUTH_TOKEN_INVALID) | #/components/schemas/ApiErrorResponseDto |
| 403 | The caller is not an eligible owner or integrations admin of the authenticated tenant, or is not a person at all (PARTNER_IDENTITY_MAP_NOT_ELIGIBLE, AUTH_PRINCIPAL_NOT_HUMAN) | #/components/schemas/ApiErrorResponseDto |
| 409 | The named person is not retained by this tenant, an integration has never held access to it, or this active mapping is already recorded (PARTNER_IDENTITY_MAP_TARGET_NOT_RETAINED, PARTNER_IDENTITY_MAP_INTEGRATION_NOT_KNOWN, PARTNER_IDENTITY_MAP_ALREADY_RECORDED) | #/components/schemas/ApiErrorResponseDto |

## Artifact Examples

### Response 401 example

```json
{
  "statusCode": 401,
  "message": "Invalid or missing authentication token",
  "error": "AUTH_TOKEN_INVALID"
}
```
