Sign in

v1

latestSwagger 2.02026-07-1760185352.5 KB
identity

Delete a credential for a specific identity

Delete an identity credential by its type. You cannot delete passkeys or code auth credentials through this API.

delete/admin/identities/{id}/credentials/{type}

Path parameters

idstring required

ID is the identity's ID.

type'password' | 'oidc' | 'totp' | 'lookup_secret' | 'webauthn' | 'code' | 'passkey' | 'profile' | 'saml' | 'deviceauthn' | 'identifier_first' | 'link_recovery' | 'code_recovery' required

Type is the type of credentials to delete. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML deviceauthn CredentialsTypeDeviceAuthn identifier_first CredentialsTypeIdentifierFirst link_recovery CredentialsTypeRecoveryLink CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow). It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode

Query parameters

identifierstring

Identifier is the identifier of the credential to delete. It is required for the oidc, saml, and deviceauthn credential types: for oidc and saml it selects the provider link to remove, for deviceauthn it is the client_key_id of the device key to revoke. Find the identifier by calling the GET /admin/identities/{id}?include_credential={type} endpoint.

Response

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is typically 204.