Mint a short lived single sign-on token for a user, so an application can drop that user straight into the ActiveCampaign UI without asking them for their password. This is the v3 equivalent of the v1 singlesignon action, and the token it returns is produced by the same implementation.

The token is spent by sending the user to https://{account}.activehosted.com/admin/main.php?_ssot={token}, from the IP address the token was bound to. Spending a token does not consume it: it stays usable from that address until it expires.

Only a user in the Admin group may call this endpoint, and only for a user they may administer; anything else is a 403, as is minting a token for the account's primary administrator. A user id that does not exist is a 404.

Minting a token replaces the token this application previously minted for the same user and IP address, and expired tokens are deleted. There is no endpoint that revokes a token: a token stops working when it expires, so keep duration as short as the application needs, exactly as in v1.