Skip to main content
POST
/
users
/
{id}
/
verification
/
flows
Start Veriff or BankID verification for an employee
curl --request POST \
  --url https://{host}/api/v1/users/{id}/verification/flows \
  --header 'API-key: <api-key>' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "provider": "veriff",
  "partner_return_url": "<string>"
}
'
{
  "verification_id": "<string>",
  "provider": "<string>",
  "status": "<string>",
  "verification_url": "<string>",
  "status_check_url": "<string>",
  "expires_at": "<string>"
}

Authorizations

Authorization
string
header
required

Sanctum personal access token (access_tokens / partner API settings).

API-key
string
header
required

UUID API key stored for the partner user.

Path Parameters

id
integer
required

Body

application/json
provider
enum<string>
required

Identity provider to use for this session.

Available options:
veriff,
bankid
partner_return_url
string
required

Where to send the user after verification completes on EasyFreelance. Must match an approved registration: the same requested_url you had approved (or an allowed extension of that base per server rules). The normalized_* fields on the return-URL record are auxiliary; they do not define matching by themselves. Query parameters may be appended by EasyFreelance when redirecting; design this URL to tolerate or ignore unknown query params.

Maximum string length: 2048

Response

Session created. Use verification_id for polling; send the user to verification_url to start the browser flow.

verification_id
string
required

Session ID — pass as verificationSession when polling GET /verification/status/{verificationSession}.

provider
string
required
status
string
required

Initial session status from the server (typically pending until the user completes the flow).

verification_url
string
required

URL on EasyFreelance where the user starts; they are then routed to the chosen provider and eventually redirected to partner_return_url.

status_check_url
string
required

URL the API exposes for checking this session; integrators should poll using verification_id on GET /verification/status/{verificationSession} as documented.

expires_at
string
required

After this time the session may no longer be valid for completing verification.