Sumsub references: This flow is built on Sumsub’s Reusable KYC feature. The token-generation endpoint used by the donor is documented at Generate share token.
Scope: Token sharing is currently supported for individual applicants only. Business onboarding is not in scope for this flow.
How It Works
The share token flow has three parties:- Donor — the Sumsub client that originally verified the customer. They generate the share token, scoped to Dakota’s Sumsub
clientId(dakota.xyz_158913). - Dakota — the recipient. You redeem the token on Dakota’s side, which creates a fresh applicant on Dakota’s Sumsub account with the donor’s data copied over.
- Sumsub — handles the transfer of identity data and documents between the donor’s account and Dakota’s account.
Before You Start: Establish the Sharing Relationship
Three things must be in place before a share token can be generated. The first two are entirely on your side; the third is an exchange between you and Dakota, carried out in each party’s own Sumsub Dashboard.1. Reusable KYC, enabled on the verification level
Reusable KYC is switched on per verification level, not once for the account. A level that doesn’t have it cannot produce a share token, even if the feature is enabled for your organization. Enable it on the level your applicant was verified at, then generate a token. Sumsub’s Reusable KYC Share documentation covers the dashboard configuration — follow it rather than us, since it stays current with their interface.If you use a verification preset, the setting lives in the preset, not the level. Per Sumsub: “If you use a verification preset, you must enable Reusable KYC in the preset settings. Otherwise, Reusable KYC will not work for the level where this preset is applied.”
Can’t find the setting? It’s in your Sumsub account, not Dakota’s — we’re the recipient, you’re the donor, so there’s nothing to change on our side and we can’t see your dashboard. If the toggle isn’t where you expect, your Sumsub CSM will know the exact path for your account’s configuration.
Your level doesn’t have to match ours
ThelevelName used at redemption is the recipient’s level — Dakota’s. You don’t configure it and it doesn’t have to match yours by name.
What does matter is that the two levels share verification steps. Sumsub compares the steps your level collected against the steps ours requires:
In practice, Dakota’s level expects an identity document and a proof of address. A donor level that captured only an identity document still imports successfully — the customer is simply asked for the proof of address before the application can be submitted. See Things to Know.
2. The “Share applicants data” permission
Sumsub’s share-token endpoint requires a specific dashboard permission:“This method requires the Share applicants data dashboard permission. App tokens and team members must have a role that includes this permission; otherwise, the request fails with a permission error.” — Generate share tokenIf your token-generation call fails with a permission error, check the role attached to the app token you are signing the request with.
3. Add Dakota as a recipient using a partner token
Before any share token can be generated, you must add Dakota to your sharing partners in Sumsub. This requires a partner token, which is a different thing from the share tokens you will generate later — and it comes from Dakota, not from Sumsub.Request the partner token from Dakota. Sumsub generates the partner token on the recipient’s side when we add you as a donor, and we then pass it to you. Contact your Dakota representative to request it — you cannot generate it yourself, and Sumsub support cannot issue it for you.
- In the Sumsub Dashboard, open the Reusable identity section and go to the Partners page.
- Select the Recipients tab and click Add recipient.
- Paste the partner token Dakota gave you.
- Confirm that you want to add Dakota as a recipient.
forClientId: dakota.xyz_158913 as described in Importing Sumsub Tokens.
Sumsub’s own references for this setup:
- Partner management — adding donors and recipients, and the partner token exchange
- Reusable KYC — overview of the feature and its prerequisites
- Reusable KYC Share — the donor-recipient relationship and the full token lifecycle
forClientId is not the setup step. The forClientId parameter you pass when generating each token scopes that token to Dakota. It presumes the sharing relationship already exists — it does not create it. If you are being asked for a partner token or a recipient registration step that isn’t covered here, that is a Sumsub-side configuration item; take it to Sumsub with the clientId above.
