Resume Persona Inquiry Session

Resume a Persona Inquiry Session

This feature is useful for cases when users lose their Persona inquiry session and ensures they can resume the flow without losing their progress. It is only available for Persona inquiries in the pending state. Inquiries that are expired or completed are not eligible for session recovery.

❗️

Important: The Persona session token grants direct access to customer PII within an inquiry flow. It must only be shared with the authenticated user who initiated the verification. Never log or expose this token to third parties.

To generate a new Persona session token use the POST /api/persona_sessions endpoint with the following JSON body:

{
  "persona_inquiry_id": "inq_h2gov4M7XaAGqPasJgKEQ4bUzy123",
  "identity_verification_guid": "e5e52a77aecda18b96086a59de90612y"
}

• identity_verification_guid- Represents the identifier of the identity verification associated with the Persona inquiry
• persona_inquiry_id- The unique identifier for the Persona inquiry (starts with inq_). You can obtain this from the persona_inquiry_id field in the identity verification resource. For business' UBOs inquiries, the persona_inquiry_id can be found under business_associates[].persona_inquiry_id

In the response you will get the persona_session_token attribute which can be used to build a new user session to resume their Persona inquiry flow without losing their progress. For more details see the Persona instructions on how to load the session: Resuming Inquiries

{
  "persona_session_token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJpcXNlXzJQMmR0UmFCVEQ4bmQ5QnZFUnNqRmZIcHExMjMiLCJhdWQiOiJwZXJzb25hLXZlcmlmeSIsImlzcyI6IndpdGhwZXJzb25hLmNvbSIsImlhdCI6MTc0OTQ3NzA5NSwibmJmIjoxNzQ5NDc3MDk1LCJleHAiOjE3NTAwNzgyNDksImp0aSI6IjhmMjdkNGUxLWY1NjItNDU4MS05MjdjLTk4OTliZWYwNTEyMyIsImlucXVpcnlfaWQiOiJpbnFfaDJnb3Y0TTdYYUFHcVBhc0pnS0VRNGJVenkxMjMiLCJlbnZpcm9ubWVudF9pZCI6ImVudl9FSDh0UzY5TFR6RzlLc1RUdGVvRXQxMjMifQ.JmEiLEB-aPl3ZnjzuLBluruvJq6UwgYFdYv_J9In5-I",
  "persona_inquiry_id": "inq_h2gov4M7XaAGqPasJgKEQ4bUzy123",
  "identity_verification_guid": "e5e52a77aecda18b96086a59de90612y"
}

This token is only valid until the persona inquiry will expire, for extracting the expiry time you can decode the JWT token payload and extract the expattribute.

If an attempt is made to generate the session token for an expired or completed Persona inquiry the platform will respond with an error:

{
  "status": 400,
  "error_message": "Invalid persona inquiry state",
  "message_code": "invalid_parameter"
}