Settings
Rotate the identity-handoff shared secret
Rotates the shared secret used by the tenant to sign identity-handoff JWTs for the SpitShake Identity Engine. The new secret is returned exactly once in the response — it is never retrievable again.
Requires admin role and password re-authentication. Writes an
account.identity_handoff_secret_rotated audit event.
See the Identity-bound signing guide for how the tenant uses this secret.
POST
Error
Authorizations
API token generated at Settings > API
Body
application/json
Current user password (for re-authentication).
Error