Create an identity check

curl --request POST \
  --url https://app.sajn.se/api/v1/identity-checks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "fullName": "Kai Lindqvist",
  "email": "[email protected]",
  "phone": "+46701740605",
  "channel": "EMAIL",
  "reference": "HR-2026-0142",
  "contactId": "cm4k2x9p10006abcd1234efgh",
  "expiresAt": "2026-10-28T22:00:00.000Z",
  "language": "sv",
  "nationalId": "191212121212"
}
'

import requests

url = "https://app.sajn.se/api/v1/identity-checks"

payload = {
    "fullName": "Kai Lindqvist",
    "email": "[email protected]",
    "phone": "+46701740605",
    "channel": "EMAIL",
    "reference": "HR-2026-0142",
    "contactId": "cm4k2x9p10006abcd1234efgh",
    "expiresAt": "2026-10-28T22:00:00.000Z",
    "language": "sv",
    "nationalId": "191212121212"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    fullName: 'Kai Lindqvist',
    email: '[email protected]',
    phone: '+46701740605',
    channel: 'EMAIL',
    reference: 'HR-2026-0142',
    contactId: 'cm4k2x9p10006abcd1234efgh',
    expiresAt: '2026-10-28T22:00:00.000Z',
    language: 'sv',
    nationalId: '191212121212'
  })
};

fetch('https://app.sajn.se/api/v1/identity-checks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.sajn.se/api/v1/identity-checks",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'fullName' => 'Kai Lindqvist',
    'email' => '[email protected]',
    'phone' => '+46701740605',
    'channel' => 'EMAIL',
    'reference' => 'HR-2026-0142',
    'contactId' => 'cm4k2x9p10006abcd1234efgh',
    'expiresAt' => '2026-10-28T22:00:00.000Z',
    'language' => 'sv',
    'nationalId' => '191212121212'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.sajn.se/api/v1/identity-checks"

	payload := strings.NewReader("{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.sajn.se/api/v1/identity-checks")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.sajn.se/api/v1/identity-checks")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "cm4k2x9p10025abcd1234efgh",
  "organizationId": "cm4k2x9p10000abcd1234efgh",
  "fullName": "Kai Lindqvist",
  "email": "[email protected]",
  "phone": "+46701740605",
  "channel": "EMAIL",
  "status": "VERIFIED",
  "reference": "HR-2026-0142",
  "language": "sv",
  "expiresAt": "2026-10-28T22:00:00.000Z",
  "verifiedAt": "2026-09-29T07:41:00.000Z",
  "createdAt": "2026-09-28T09:12:00.000Z",
  "updatedAt": "2026-09-28T09:15:00.000Z",
  "verificationUrl": "https://app.sajn.se/id/cm4k2x9p10025abcd1234efgh",
  "contact": {
    "id": "cm4k2x9p10006abcd1234efgh",
    "firstName": "Kai",
    "lastName": "Lindqvist",
    "email": "[email protected]",
    "phone": "+46701740605"
  },
  "createdBy": {
    "id": "cm4k2x9p10002abcd1234efgh",
    "email": "[email protected]",
    "name": "Alex Berg"
  },
  "audits": [
    {
      "id": "cm4k2x9p10038abcd1234efgh",
      "type": "VERIFICATION_COMPLETED",
      "createdAt": "2026-09-28T09:12:00.000Z",
      "data": {
        "partyId": "cm4k2x9p10004abcd1234efgh",
        "signatureType": "SE_BANKID"
      },
      "name": "Kai Lindqvist",
      "email": "[email protected]",
      "ipAddress": "192.0.2.10",
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
    }
  ],
  "data": {
    "partyId": "cm4k2x9p10004abcd1234efgh",
    "signatureType": "SE_BANKID"
  }
}

{
  "code": "VALIDATION_FAILED",
  "message": "Invalid input: expected string, received undefined",
  "userMessage": "Förfrågan innehåller ogiltiga värden.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "issues": [
    {
      "path": "fullName",
      "code": "INVALID_TYPE",
      "message": "Invalid input: expected string, received undefined"
    }
  ]
}

{
  "code": "UNAUTHORIZED",
  "message": "Invalid API token",
  "userMessage": "Ogiltig API-nyckel",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INSUFFICIENT_SCOPE",
  "message": "Insufficient OAuth scope: requires sajnid:write",
  "userMessage": "Applikationen saknar behörighet (scope) för denna åtgärd.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "requiredScopes": [
    "sajnid:write"
  ],
  "grantedScopes": [
    "profile:read"
  ]
}

{
  "code": "NOT_FOUND",
  "message": "Identity check not found",
  "userMessage": "Resursen hittades inte.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "resource": "sajn_id"
}

{
  "code": "INVALID_STATE",
  "message": "The resource's current state doesn't allow the operation, such as editing a document that was already sent or downloading a file that isn't produced yet.",
  "userMessage": "Åtgärden är inte möjlig i resursens nuvarande status.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "RATE_LIMITED",
  "message": "API rate limit exceeded",
  "userMessage": "För många förfrågningar. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal server error",
  "userMessage": "Något gick fel.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "UPSTREAM_UNAVAILABLE",
  "message": "A service the operation depends on, such as an eID provider or a connected integration, failed or is unavailable. Retry with exponential backoff.",
  "userMessage": "En extern tjänst svarar inte just nu. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

POST

api

identity-checks

Create an identity check

curl --request POST \
  --url https://app.sajn.se/api/v1/identity-checks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "fullName": "Kai Lindqvist",
  "email": "[email protected]",
  "phone": "+46701740605",
  "channel": "EMAIL",
  "reference": "HR-2026-0142",
  "contactId": "cm4k2x9p10006abcd1234efgh",
  "expiresAt": "2026-10-28T22:00:00.000Z",
  "language": "sv",
  "nationalId": "191212121212"
}
'

import requests

url = "https://app.sajn.se/api/v1/identity-checks"

payload = {
    "fullName": "Kai Lindqvist",
    "email": "[email protected]",
    "phone": "+46701740605",
    "channel": "EMAIL",
    "reference": "HR-2026-0142",
    "contactId": "cm4k2x9p10006abcd1234efgh",
    "expiresAt": "2026-10-28T22:00:00.000Z",
    "language": "sv",
    "nationalId": "191212121212"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    fullName: 'Kai Lindqvist',
    email: '[email protected]',
    phone: '+46701740605',
    channel: 'EMAIL',
    reference: 'HR-2026-0142',
    contactId: 'cm4k2x9p10006abcd1234efgh',
    expiresAt: '2026-10-28T22:00:00.000Z',
    language: 'sv',
    nationalId: '191212121212'
  })
};

fetch('https://app.sajn.se/api/v1/identity-checks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.sajn.se/api/v1/identity-checks",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'fullName' => 'Kai Lindqvist',
    'email' => '[email protected]',
    'phone' => '+46701740605',
    'channel' => 'EMAIL',
    'reference' => 'HR-2026-0142',
    'contactId' => 'cm4k2x9p10006abcd1234efgh',
    'expiresAt' => '2026-10-28T22:00:00.000Z',
    'language' => 'sv',
    'nationalId' => '191212121212'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.sajn.se/api/v1/identity-checks"

	payload := strings.NewReader("{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.sajn.se/api/v1/identity-checks")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.sajn.se/api/v1/identity-checks")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"fullName\": \"Kai Lindqvist\",\n  \"email\": \"[email protected]\",\n  \"phone\": \"+46701740605\",\n  \"channel\": \"EMAIL\",\n  \"reference\": \"HR-2026-0142\",\n  \"contactId\": \"cm4k2x9p10006abcd1234efgh\",\n  \"expiresAt\": \"2026-10-28T22:00:00.000Z\",\n  \"language\": \"sv\",\n  \"nationalId\": \"191212121212\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "cm4k2x9p10025abcd1234efgh",
  "organizationId": "cm4k2x9p10000abcd1234efgh",
  "fullName": "Kai Lindqvist",
  "email": "[email protected]",
  "phone": "+46701740605",
  "channel": "EMAIL",
  "status": "VERIFIED",
  "reference": "HR-2026-0142",
  "language": "sv",
  "expiresAt": "2026-10-28T22:00:00.000Z",
  "verifiedAt": "2026-09-29T07:41:00.000Z",
  "createdAt": "2026-09-28T09:12:00.000Z",
  "updatedAt": "2026-09-28T09:15:00.000Z",
  "verificationUrl": "https://app.sajn.se/id/cm4k2x9p10025abcd1234efgh",
  "contact": {
    "id": "cm4k2x9p10006abcd1234efgh",
    "firstName": "Kai",
    "lastName": "Lindqvist",
    "email": "[email protected]",
    "phone": "+46701740605"
  },
  "createdBy": {
    "id": "cm4k2x9p10002abcd1234efgh",
    "email": "[email protected]",
    "name": "Alex Berg"
  },
  "audits": [
    {
      "id": "cm4k2x9p10038abcd1234efgh",
      "type": "VERIFICATION_COMPLETED",
      "createdAt": "2026-09-28T09:12:00.000Z",
      "data": {
        "partyId": "cm4k2x9p10004abcd1234efgh",
        "signatureType": "SE_BANKID"
      },
      "name": "Kai Lindqvist",
      "email": "[email protected]",
      "ipAddress": "192.0.2.10",
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
    }
  ],
  "data": {
    "partyId": "cm4k2x9p10004abcd1234efgh",
    "signatureType": "SE_BANKID"
  }
}

{
  "code": "VALIDATION_FAILED",
  "message": "Invalid input: expected string, received undefined",
  "userMessage": "Förfrågan innehåller ogiltiga värden.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "issues": [
    {
      "path": "fullName",
      "code": "INVALID_TYPE",
      "message": "Invalid input: expected string, received undefined"
    }
  ]
}

{
  "code": "UNAUTHORIZED",
  "message": "Invalid API token",
  "userMessage": "Ogiltig API-nyckel",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INSUFFICIENT_SCOPE",
  "message": "Insufficient OAuth scope: requires sajnid:write",
  "userMessage": "Applikationen saknar behörighet (scope) för denna åtgärd.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "requiredScopes": [
    "sajnid:write"
  ],
  "grantedScopes": [
    "profile:read"
  ]
}

{
  "code": "NOT_FOUND",
  "message": "Identity check not found",
  "userMessage": "Resursen hittades inte.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2",
  "resource": "sajn_id"
}

{
  "code": "INVALID_STATE",
  "message": "The resource's current state doesn't allow the operation, such as editing a document that was already sent or downloading a file that isn't produced yet.",
  "userMessage": "Åtgärden är inte möjlig i resursens nuvarande status.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "RATE_LIMITED",
  "message": "API rate limit exceeded",
  "userMessage": "För många förfrågningar. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal server error",
  "userMessage": "Något gick fel.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

{
  "code": "UPSTREAM_UNAVAILABLE",
  "message": "A service the operation depends on, such as an eID provider or a connected integration, failed or is unavailable. Retry with exponential backoff.",
  "userMessage": "En extern tjänst svarar inte just nu. Försök igen om en stund.",
  "requestId": "req_V1StGXR8Z5jdHi6BmyT2"
}

Authorizations

Authorization

string

header

required

Personal API key, e.g. Authorization: Bearer sajn_sk_.... Not scope-limited — acts as the issuing user.

Headers

Sajn-Version

enum<string>

API version for this request. Without it, the request uses the organization's default version; an organization without a default is pinned to the latest version by its first request.

Available options:

2026-09,

2026-10

Idempotency-Key

string

Makes retries safe. A retry with the same key and the same request replays the stored response for 24 hours (header Idempotent-Replayed: true); the same key with a different request returns 400.

Maximum string length: 255

Body

application/json

Body

fullName

string

required

Full name of the person to verify (required)

Minimum string length: 1

channel

enum<string>

required

How the recipient gets the verification link: EMAIL or SMS.

Available options:

EMAIL,

SMS

string<email>

Email address to send the link to. Required on the EMAIL channel.

Pattern: ^(?!\.)(?!.*\.\.)([A-Za-z0-9_'+\-\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$

phone

string

Phone number to send the link to. Required on the SMS channel.

Minimum string length: 1

reference

string

Optional reference/external ID for tracking

contactId

string

Optional contact ID to link this verification to

expiresAt

string<date-time>

When the identity check and its link expire. Must be in the future. Default: 7 days after creation.

language

enum<string>

Language of the verification messages. Default: sv.

Available options:

sv,

en,

no,

da,

fi,

de,

is,

es,

fr,

it

nationalId

string

National identity number, such as a Swedish personnummer. When set, BankID verifies that it matches; otherwise BankID verifies the name.

Response

200

string

required

The identity check ID.

organizationId

string

required

The organization ID.

fullName

string

required

Full name of the person to verify.

string | null

required

Email address the link goes to on the EMAIL channel.

phone

string | null

required

Phone number the link goes to on the SMS channel.

channel

enum<string>

required

How the recipient got the verification link.

Available options:

EMAIL,

SMS,

IN_APP

status

enum<string>

required

sajn ID Status:

CREATED: Verification created but not sent
SENT: Verification sent to recipient
OPENED: Recipient opened verification link
VERIFIED: Identity successfully verified
FAILED: Verification failed
EXPIRED: Verification link expired
CANCELLED: Verification was cancelled

Available options:

CREATED,

SENT,

OPENED,

VERIFIED,

FAILED,

EXPIRED,

CANCELLED

reference

string | null

required

Your own reference for the check.

language

enum<string> | null

required

ISO 639-1 language code, such as sv or en. GET /api/v1/helpers/languages lists them.

Available options:

sv,

en,

no,

da,

fi,

de,

is,

es,

fr,

it,

null

expiresAt

string<date-time>

required

When the identity check and its link expire.

verifiedAt

string<date-time> | null

required

When the person was verified. Null until then.

createdAt

string<date-time>

required

When the identity check was created.

updatedAt

string<date-time>

required

When the identity check was last updated.

verificationUrl

string | null

required

The verification link. Set only in the response to the create request; null otherwise.

contact

object | null

required

The contact the check is linked to.

Show child attributes

createdBy

object | null

required

A sajn user

Show child attributes

audits

object[] | null

required

What happened to the check, newest first. Null in lists and in the response to the create request.

Show child attributes

data

object | null

required

Verification data, such as the BankID result. Null in lists and in the response to the create request.

Show child attributes

Get started

Core concepts

Guides

Webhooks

API fundamentals

Upgrading

sajn Login

API reference

Create an identity check

Authorizations

Headers

Body

Response