Skip to main content
POST
Generate Login Link

Overview

The Generate Login Link endpoint creates a new secure, time-limited login link for clients to access their Fifteenth account. This is useful when:
  • The original login link has expired (7-day expiry)
  • A client has lost their login link
  • You need to provide additional login links to multiple users
  • Security requires generating a fresh login link
Each login link is single-use for initial access but allows the client to set up permanent login credentials once used.

Request

Path Parameters

number
required
The unique Fifteenth account identifier to generate a login link for.Format: Numeric ID
Example: 12345

Headers

string
required
Bearer token with your Partner API key
string
required
Must be application/json

Body Parameters

string
Email address of the specific user to generate a login link for. If not provided, generates a link for the primary account holder.Validation: Must be an existing user on the account
Example: john.doe@example.com
integer
Number of hours until the login link expires.Range: 1-168 hours (1 hour to 7 days)
Default: 168 hours (7 days)
Example: 48
string
Purpose for generating the login link (for audit logging).Options:
  • initial_access - First time account access
  • expired_link - Replacing an expired link
  • lost_credentials - Client lost their login information
  • additional_user - Link for additional account user
  • support_request - Generated for customer support
Default: expired_link
string
URL to redirect the client to after successful login. Must be a permitted domain for your partner account.Format: Valid HTTPS URL
Example: https://yourplatform.com/tax-dashboard
boolean
Whether to send an email notification to the user with the new login link.Default: true
object
Email notification customization options.

Response

Success Response

The generated secure login link for the client.Format: https://app.fifteenth.com/auth/partner-login/{token}
Security: Token is cryptographically secure and single-use for initial access
string
Email address of the user this login link is for.
string
ISO 8601 timestamp when the login link expires.
integer
Number of hours until the login link expires.
string
The purpose specified for generating this login link.
string
URL the client will be redirected to after login (if specified).
boolean
Whether an email notification was sent to the user.
Number of previous login links that were invalidated when generating this new one.
string
ISO 8601 timestamp when the login link was generated.
number
The account ID this login link provides access to.

Examples

Generate for Specific User

Response Examples

Response
Response (Custom Settings)

Error Responses

object
Account not found or user email not associated with account.
object
Invalid request parameters.
object
Account access denied or suspended.
object
Too many login link generation requests.

Security Considerations

Login links provide full account access. Handle them with the same security as passwords:
  • Single-use for initial access: After first use, clients set up permanent credentials
  • Time-limited: Links automatically expire (default 7 days, max 7 days)
  • Cryptographically secure: Uses secure random token generation
  • Invalidation: Previous links are automatically invalidated when new ones are generated
  • Audit logging: All link generation and usage is logged for security

Best Practices

Choose appropriate expiry times based on urgency:
  • Immediate support: 1-4 hours
  • Normal client access: 24-48 hours
  • Account setup: 7 days (default)
  • High security situations: 1 hour minimum
When sending notifications:
  • Always use partner branding for legitimacy
  • Include expiry information in emails
  • Warn clients not to share links
  • Use custom messages to provide context
For sensitive situations:
  • Set send_notification: false
  • Deliver links through secure channels
  • Use shorter expiry times
  • Track delivery method for your records
Respect rate limits to prevent abuse:
  • Max 10 links per account per hour
  • Use purpose field for audit trails
  • Monitor link generation patterns
  • Implement client-side rate limiting

Monitoring and Alerts

Monitor login link usage for security:

Usage Patterns

Support Ticket Integration

Next Steps

Retrieve Account

Check account status and user information

Add Users

Add additional users who need login links

Account Activity

Monitor login link usage and account activity

Authentication

Learn about API security and authentication