Skip to main content

Operator submits the caller's code (external integration)​

External-integration twin of PostHelpdeskVerifySessionIDVerify. The operator enters the code the caller read aloud; it is verified server-side against the handshake session and marks the operator->caller direction done.

Path Parameters
  • session_id uuid required
Header Parameters
  • SlashID-OrgID string required

    The organization ID

    Example: af5fbd30-7ce7-4548-8b30-4cd59cb2aba1
Request Body required
  • code string required

    Possible values: Value must match regular expression ^\d{6}$

    The 6-digit code the caller read aloud

  • location object

    A located fix — point plus horizontal accuracy radius plus capture time.

  • lat double required
  • lng double required
  • accuracyM double required

    Horizontal accuracy radius in meters. Confidence lives here.

  • capturedAt date-time required

    Device-clock timestamp of the fix (not "now").

  • isSimulated boolean

    Whether the device reported the fix as software-simulated/mocked (iOS CLLocationSourceInformation.isSimulatedBySoftware). null = the client could not determine it (e.g. web, where the Geolocation API exposes no such signal).

  • operator object required
  • email email required

    The human operating the integration (e.g. the ServiceNow agent). MUST be derived server-side by the integration (ServiceNow: gs.getUser().getEmail()), never supplied by its own client. Resolved to a SlashID console person holding a verifier role; 403 if it does not resolve or lacks the role.

  • assertion string required

    Possible values: [integration_asserted, idp_verified]

    How the operator identity was established. integration_asserted — the calling integration vouches for it under its own API credential; idp_verified — proven to SlashID directly. Recorded on every attempt so that a later move to per-agent authentication does not change what historical audit rows meant. Only integration_asserted is accepted today.

Responses

Updated verification status

Schema
  • meta object
  • pagination object
  • limit integer
  • offset integer
  • total_count int64
  • cursor_pagination object

    Cursors are opaque. Follow the tokens the server returns; never construct, parse or modify one.

  • limit integer
  • next_cursor string

    Opaque token addressing the next page. Absent on the last page.

  • prev_cursor string

    Opaque token addressing the previous page. Absent on the first page.

  • last_cursor string

    Opaque token addressing the final page directly, so a client can jump to the end without a total count.

  • total_count int64

    Total number of matching items. Returned on the FIRST page only; clients cache it for the remainder of the walk.

  • errors object[]
  • httpcode integer
  • message string
  • result object
  • session_id string
  • status string

    Possible values: [pending, partial, complete, expired, cancelled]

    Current status of the helpdesk mutual verification (handshake-backed)

  • target_email string
  • initiator_verified_target boolean

    Admin has verified the caller's code

  • target_verified_initiator boolean

    Caller has verified the admin's code

  • confirmed_at date-time
  • expires_at date-time