Users: generateAuthenticationToken

Generates an authentication token which the device policy client can use to provision the given EMM-managed user account on a device. The generated token is single-use and expires after a few minutes.

You can provision a maximum of 10 devices per user.

This call only works with EMM-managed accounts.


HTTP request



Parameter name Value Description
Path parameters
enterpriseId string The ID of the enterprise.
userId string The ID of the user.


This request requires authorization with the following scope:


For more information, see the authentication and authorization page.

Request body

Do not supply a request body with this method.


If successful, this method returns a response body with the following structure:

  "kind": "androidenterprise#authenticationToken",
  "token": string
Property name Value Description Notes
token string The authentication token to be passed to the device policy client on the device where it can be used to provision the account for which this token was generated.
kind string