ssn product scope — along with individual — in the products array when you create the Connect session. The access token for that connection can then read the field.
Authorization
Includessn in the products array when you create the Connect session. Launch that session through either the redirect or embedded flow — the scope is set on the session, so it applies to both.
session_id for the embedded flow or connect_url for the redirect flow.
To add ssn to a connection that already exists, create a reauthentication session with the updated products array. The employer reauthorizes with the new scope.
Request
Passssn in the options.include array to return the field:
Response
Finch returns SSN in either raw or encrypted format, depending on the provider. The examples below show only the SSN-related fields — see /individual for the full response shape. Check Field Support for which format a provider returns and how to decrypt encrypted values.Response with Raw SSN
When a provider returns a raw value,ssn holds the number and encrypted_ssn is null. The SSN below is not a real number.
Response with Encrypted SSN
When a provider returns an encrypted value,ssn is null and encrypted_ssn holds the ciphertext. Decrypt it to read the raw value.