This page names the underlying verification provider because the shared-token
flow cannot be described without it: you create the share token in your own account
with that provider. Elsewhere the docs keep the provider abstract.
Prerequisites
Reusable KYC is off by default on both sides. Before any of this works:- You verify customers on your own Sumsub level.
- A one-time data-sharing agreement is signed with Sumsub, by both parties.
- Etherfuse is added as a sharing partner in your Sumsub dashboard, and you in ours.
- The account creating share tokens holds the “Share applicants data” permission.
The flow
1
Create the customer's organization
A
personal org, as in any other flow. See KYC WebSDK. Send userInfo.email: the import uses it.2
Create a share token in your Sumsub account
For the applicant you already verified, targeting Etherfuse’s client id. Share tokens are short-lived and single-use.
3
Import the session
4
Push what the import response lists as pending
Usually the
occupation answers, through POST /organization/{organizationId}/verification/questionnaire, and any region-specific document through POST /organization/{organizationId}/verification/documents. Send only these. When the last one lands, the identity stage is submitted for review.5
Wait for the next stage
A
kycUpdated webhook arrives when the stage is submitted, and again when the review clears and the next stage arrives (status back to inProgress). Then read GET /organization/{organizationId}/kyc?requirements=true.6
Push the later stages as they appear
proofOfAddress appears only if the identity document carried no address and the shared session did not include one. customerAgreement appears last; send it only if you are forwarding the customer’s acceptance. Repeat the previous step after each one.7
Launch the customer for what remains
Any questionnaire you did not answer over the API, plus liveness if the shared session did not cover it. The customer also accepts the customer agreement in
/idv unless you forwarded it.Importing
200 OK
proofOfAddress and customerAgreement are not listed yet, even when the customer will need them.
What carries across
Error handling
The endpoint’s full response codes are on its API reference page. Errors are problem details; the messages below appear indetail. Requirement and overall statuses are in Tracking verification status.