---
title: "Verify federation link"
method: POST
path: "/v1/federation/verify/{challengeToken}"
tags: ["Claims"]
---

# Verify federation link

`POST /v1/federation/verify/{challengeToken}`

## Request

- Base URL: `https://idaas.yourflexpay.com/api`
- URL: `https://idaas.yourflexpay.com/api/v1/federation/verify/{challengeToken}`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api/docs/v1/federation/verify/:challengeToken/post.ts> (a function with typed inputs; its response is checked against the schema)

Verifies a federation challenge token and finalizes cross-application identity linking.

## Path parameters

- `challengeToken` string, required

## Response `200`

Federation link verified

- ApiResponseFederatedIdentityResponse
  - `success` boolean
  - `message` string
  - `errorCode` string
  - `data` FederatedIdentityResponse
    - `id` string, uuid
    - `primaryTag` string
    - `links` IdentityLinkInfo[]
      - `id` string, uuid
      - `linkedTag` string
      - `status` 'PENDING' | 'VERIFIED' | 'REVOKED'
      - `verifiedBy` string
      - `createdAt` string, date-time
    - `createdAt` string, date-time
  - `errors` string[]
  - `timestamp` string, date-time

## Other responses

- `404`: Challenge token not found or expired
- `409`: Challenge token is not in a verifiable state

## Changes

- **2026-04-17** `db1f954badfb`: 3 info
  - added the non-success response with the status `404`
  - added the non-success response with the status `409`
  - added the optional property `errorCode` to the response with the `200` status

[Operation history](https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api/changes/v1/federation/verify/:challengeToken/post.md)

---

[API](https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api.md) - [All operations](https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api/llms.txt) - [OpenAPI document](https://skmtc.dev/reflexpay/apis/idaas-identity-as-a-service-api/revisions/db1f954badfb?raw)