---
title: "Take back a member's Microsoft or Slack connection"
method: DELETE
path: "/v1/members/{membership_id}/identity-assertion"
tags: ["members"]
---

# Take back a member's Microsoft or Slack connection

`DELETE /v1/members/{membership_id}/identity-assertion`

## Request

- Base URL: `https://api.patricia.app` (the document declares no server; this is the origin it was published from)
- URL: `https://api.patricia.app/v1/members/{membership_id}/identity-assertion`
- Auth: HTTP bearer

Undo a connection an owner or admin made on a member's behalf. The member is signed out of Patricia everywhere as part of it, because the connection was a way in. This is one-way: the account that was connected cannot be connected again afterwards, to this member or to anyone else, so use it to take a wrong connection away rather than to move one to the right teammate. The provider query value defaults to microsoft; send slack for a Slack connection. It does not touch a connection the member made themselves, including one an admin made first that the member has since proved is theirs.

## Path parameters

- `membership_id` string, uuid, required

## Query parameters

- `provider` 'microsoft' | 'slack': Which chat platform the connection is on. Defaults to microsoft, so an omitted value takes back the Microsoft connection. Send slack for a Slack one.

## Headers

- `X-Tenant-Id` string, nullable

## Response `200`

Successful Response

- IdentityAssertionWithdrawalResult: What the withdrawal took away. Ids only — no addresses and no directory object id.
  - `membership_id` string, uuid, required
  - `identity_id` string, uuid, required
  - `directory_id` string, required
  - `left_without_a_confirmed_way_to_sign_in` boolean, required: True when Patricia could not confirm any remaining way for this member to sign in. The count is deliberately cautious and leaves out Microsoft connections, so a member who signs in with Microsoft can still have this reported for them. The withdrawal still happened: taking back a connection an admin made is never blocked by being the last one, because a wrongly made connection has to be removable. Invite the member to set a password or connect an account of their own if they need a way in.

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden. Inspect response body `code` for the specific reason (for example: PERMISSION_DENIED, EMAIL_NOT_VERIFIED, TENANT_ACCESS_REQUIRED, ROLE_UNRESOLVED)
- `404`: Not found
- `409`: Conflict
- `422`: Validation error

---

[API](https://skmtc.dev/patricia/apis/patricia-api.md) · [All operations](https://skmtc.dev/patricia/apis/patricia-api/llms.txt) · [OpenAPI document](https://skmtc.dev/patricia/apis/patricia-api/revisions/0dfb44495ea1?raw)