# User - Identity Verification

.sc-doc-table table { table-layout: auto; width: 100%; }
table th, table td { word-break: keep-all; overflow-wrap: normal; padding: 8px 14px; vertical-align: top; }
table th:first-child, table td:first-child { white-space: nowrap; }
table td code, table th code { white-space: nowrap; }
Run the user through identity verification before granting access to credit data. The host's configuration selects which flow runs: **Prefill + Onboarding**, **Digital Identity Trust + Secure Multi-Factor Authentication**, or **Digital Identity Trust + Customer OTP**.
**Authentication.** User access token. The token's user must match the resource owner.
Learn more: [Identity Verification](/client-spec/products#identity-verification).

 - [POST /users/dit-identity](https://crsintegration.redocly.app/client-spec/user-identity-verification/postditverifyidentity.md): Submits personal identity information (name, SSN, DOB, address) for Digital Identity Trust verification. **Flow:** On success, returns a session `token`. The next step depends on the customer's verifi
 - [POST /users/smfa-send-link/{ditToken}](https://crsintegration.redocly.app/client-spec/user-identity-verification/postsmfasendlink.md): Sends a Secure Multi-Factor Authentication link to the user's mobile device or email. **Parameters:** The `{ditToken}` path parameter is the session token returned by `POST /users/dit-identity`. Use t
 - [POST /users/smfa-verify-status/{smfaToken}](https://crsintegration.redocly.app/client-spec/user-identity-verification/postsmfaverifystatus.md): Checks whether the user completed the SMFA link verification on their mobile device or email. On success, the user is enrolled in Equifax and credit monitoring features are activated. **Parameters:**
 - [POST /users/begin-enrollment/{smfaToken}](https://crsintegration.redocly.app/client-spec/user-identity-verification/beginenrollment.md): Initiates Equifax enrollment for a user who has passed DIT verification and been verified by the customer via OTP. **Parameters:** The `{smfaToken}` path parameter is the session token from the DIT ve
 - [POST /users/identity-prefill](https://crsintegration.redocly.app/client-spec/user-identity-verification/startidentityprefill.md): Initiates identity prefill verification. Submits the user's name and phone number for phone risk assessment. If SNA (Silent Network Authentication) succeeds, OTP is skipped and the user can proceed di
 - [POST /users/identity-submit-otp](https://crsintegration.redocly.app/client-spec/user-identity-verification/submitidentityotp.md): Submits the 6-digit OTP code sent to the user's phone during prefill verification. On successful verification, returns prefill data and marks the session as accepted. **Requirements:** The user must h
 - [POST /users/identity-resend-otp](https://crsintegration.redocly.app/client-spec/user-identity-verification/resendidentityotp.md): Resends the OTP code to the user's phone. **Requirements:** The user must have completed the prefill step with a `REVIEW` status, meaning OTP verification is required. **Limits:** Rate limited to one
 - [POST /users/identity-onboarding](https://crsintegration.redocly.app/client-spec/user-identity-verification/submitidentityonboarding.md): Submits full identity data (SSN, DOB, address) to complete the onboarding process after prefill verification. On success, the user is enrolled in Equifax. **Limits:** The user has only **1 attempt** —