Claims & consent

Pass claim keys as a string array when starting identification (REST or OIDC session start). Only approved claims appear in flow completion or resource responses.

Principles

• Request the minimum claims your product needs.
• Claims availability may depend on app scopes and user consent.
• Sandbox may return synthetic data—never use it for compliance decisions.

Example request

{
  "claims": ["naming.given", "naming.family", "contact.email"]
}

Full catalog

The Claims reference lists every key with descriptions, request examples, encrypted ping payloads, and Node decrypt samples.

After identification, decrypt ping results: Handling encrypted claims.

Restricted sectors (medical, education) may require special provisioning—contact pasby if you need those scopes.