sam_account_name should correspond to an AD username and contain no spaces.
mail should be a valid email address.

Language
Authorization
Header
Click Try It! to start a request and see the response here!