Skip to main content
SSN is a secure field in the Finch API. Your use case needs to be approved by your Developer Success Representative before enabling. However, you can test SSN via the Finch Sandbox without any approval.
Finch returns Social Security Number (SSN) as a field in the /individual endpoint. However, the SSN field is not returned by default; you must enable it first. To enable SSN, request the ssn product scope — along with individual — in the products array when you create the Connect session. The access token for that connection can then read the field.

Authorization

Include ssn in the products array when you create the Connect session. Launch that session through either the redirect or embedded flow — the scope is set on the session, so it applies to both.
Use session_id for the embedded flow or connect_url for the redirect flow. To add ssn to a connection that already exists, create a reauthentication session with the updated products array. The employer reauthorizes with the new scope.

Request

Pass ssn in the options.include array to return the field:

Response

Finch returns SSN in either raw or encrypted format, depending on the provider. The examples below show only the SSN-related fields — see /individual for the full response shape. Check Field Support for which format a provider returns and how to decrypt encrypted values.

Response with Raw SSN

When a provider returns a raw value, ssn holds the number and encrypted_ssn is null. The SSN below is not a real number.

Response with Encrypted SSN

When a provider returns an encrypted value, ssn is null and encrypted_ssn holds the ciphertext. Decrypt it to read the raw value.