Skip to content
PaloNexus
Request access Request

Resolve Identity

POST
/v1/identity/resolve
 
curl --request POST \
  --url https://example.com/v1/identity/resolve \
  --header 'Content-Type: application/json' \
  --data '{ "claims": {}, "idp": "example", "tenant": "example" }'

Resolve a login-token claim set against the SCIM directory under source precedence. SCIM is authoritative; token contributes session context + surfaces conflicts. A stale token never reactivates an inactive employee.

Request Body required

Section titled “Request Body required ”
Media type application/json
ResolveIdentityRequest

A decoded login-token claim set to resolve against the SCIM directory under source precedence. idp/tenant are optional hints; otherwise the token iss is matched through the issuer map. (MVP: claims are trusted edge input — no JWT signature verification; deferred to BACKLOG.)

object
claims
required
Claims
object
key
additional properties
any
idp
Any of:
string
tenant
Any of:
string
Example generated
{
  "claims": {},
  "idp": "example",
  "tenant": "example"
}

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Successful Response

Media type application/json
Example generated
example

422

Section titled “422 ”

Validation Error

Media type application/json
HTTPValidationError
object
detail
Detail
Array<object>
ValidationError
object
loc
required
Location
Array
msg
required
Message
string
type
required
Error Type
string
input
Input
ctx
Context
object
Example generated
{
  "detail": [
    {
      "loc": [
        "example"
      ],
      "msg": "example",
      "type": "example",
      "input": "example",
      "ctx": {}
    }
  ]
}