List my linked identities

GET /fapi/v1/me/identities · called from the environment's sign-in host

Lists the identities linked to the authenticated user's account (password, social, SAML, OIDC, legacy), oldest first. The external subject (OIDC sub, SAML NameID), the identity provider's email address and credential references are never returned. Passkeys and one-time code methods are authenticators and are listed under GET /fapi/v1/me/authenticators. Reading does not require a recently verified session. Requires the authenticated user's __Host-idp_session cookie; if the cookie is missing, expired, or revoked, returns 401 unauthenticated. A first-party app on another origin can instead send its front API access token (Authorization: DPoP <token> with a DPoP proof; see Front API access token).

Request

Headers:

No body.

Response

200 OK with {"data": [...]}.

Each item: id (idn_…), type (password, social, saml, oidc, legacy), connection_id (conn_…; null for password), provider (social provider code such as google; null for other types), linked_via (how the identity was linked: primary, auto_verified_email, user_confirmed, admin_api, import, jit, auto_domain, invite_proof, manual_link, scim_match), created_at.

Use the id with DELETE /fapi/v1/me/identities/{identity_id} to unlink an identity.

Errors

Example

curl https://example.keenauth.app/fapi/v1/me/identities \
  -H "Idp-Client: my-app/1.0.0 (node/22.0.0)" \
  -b cookies.txt

{
  "data": [
    {
      "id": "idn_01j9zzzzzzzzzzzzzzzzzzzzzz",
      "type": "social",
      "connection_id": "conn_01j9yyyyyyyyyyyyyyyyyyyyyy",
      "provider": "google",
      "linked_via": "manual_link",
      "created_at": "2026-10-01T09:00:00Z"
    }
  ]
}

Personal data

This endpoint carries personal data: linked identities. Personal data in the KeenAuth APIs describes what is stored, how long it is kept and how it is deleted. Do not send special categories of personal data (health, biometric data, religion, political opinions, sexual orientation) in any field.