# Identity Verification (Digital Identity Trust + Secure Multi-Factor Authentication)

.sc-doc-table table { table-layout: auto; width: 100%; }
table th, table td { word-break: keep-all; overflow-wrap: normal; padding: 8px 14px; vertical-align: top; }
table th:first-child, table td:first-child { white-space: nowrap; }
table td code, table th code { white-space: nowrap; }
Default identity-verification flow: DIT identity check followed by an SMFA magic link to confirm the user's device.
Learn more: [Identity Verification](/client-spec/products#identity-verification).
You can find test cases [here](/client-spec/test-cases#dit-smfa).
![Digital Identity Trust + Secure Multi-Factor Authentication flow](https://efx-dev.stitchcredit.com/api/DIT_SMFA.png)

 - [POST /direct/login](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/login.md): Authenticates a customer host using API key and secret credentials, returning a JWT access token and a refresh token. The access token must be included as a Bearer token in the `Authorization` header
 - [POST /direct/user-reg](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/register.md): Registers a new user under the authenticated host and returns the user data. **Requirements:** Email must be unique within the host. **Dormant users.** If dormant enrollment is enabled for your accoun
 - [GET /direct/preauth-token/{id}](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/preauthtoken_1.md): Generates a short-lived pre-auth token for the specified user. **Parameters:** The `{id}` path parameter is the user's unique identifier (UUID). **Flow:** The returned token is used to establish a use
 - [GET /users/preauth-token/{preauthToken}](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/exchangepreauthtoken.md): Exchanges a pre-auth `{preauthToken}` for a full user session. This is how to obtain the `userToken` used for all `/users/*` endpoints. Returns the user profile along with JWT access and refresh token
 - [POST /users/dit-identity](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/postditverifyidentity.md): Submits personal identity information (name, SSN, DOB, address) for Digital Identity Trust verification. **Flow:** On success, returns a session `token`. The next step depends on the customer's verifi
 - [POST /users/smfa-send-link/{ditToken}](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/postsmfasendlink.md): Sends a Secure Multi-Factor Authentication link to the user's mobile device or email. **Parameters:** The `{ditToken}` path parameter is the session token returned by `POST /users/dit-identity`. Use t
 - [POST /users/smfa-verify-status/{smfaToken}](https://crsintegration.redocly.app/client-spec/identity-verification-(digital-identity-trust-+-secure-multi-factor-authentication)/postsmfaverifystatus.md): Checks whether the user completed the SMFA link verification on their mobile device or email. On success, the user is enrolled in Equifax and credit monitoring features are activated. **Parameters:**