Skip to content
Vektorprogrammet

Applicant account onboarding

Explicit applicant identity proof and account linking.

Read applicant onboarding

GET/api/onboarding

Scoped applicant names and invitation states.

Query Parameters

departmentIdRequired
string

Responses

Invite applicant or revoke invitation

POST/api/onboarding

No arbitrary recipient or target Person selector.

Query Parameters

departmentIdRequired
string

Header Parameters

idempotency-keyRequired
string
if-matchRequired
string

Request Body

application/json
actionRequired
string
Values
IssueRevokeRetryDelivery
applicationIdRequired
string

Responses

Claim applicant account invitation

POST/api/onboarding/claim

The body token is required in both modes and works once. In new-account mode the token is the one credential, so a session cookie or bearer beside it is rejected. In existing-account mode the browser session names the one principal, and the token is its requirement onboarding.claim-token: it must name an open invitation. A delegated bearer cannot make the claim.

Request Body

application/json

Responses