The API-integration counterpart to the 1-Click Signup embed. Given a
phone you have already verified through
POST /private/v1/one-click/verifications/{uuid}/verify, plus a birth
date or the last 4 of an SSN to match on, Verified Inc returns the
identity and the credentials the user agreed to share.

Send birthDate, ssn4, or both — at least one is required.

A verificationUuid Verified Inc no longer holds is a 404:
verifications expire in minutes, so start a new one rather than
retrying this call. A verification that exists but is not usable yet —
one whose code has not been submitted — is a 422 naming the field.

The response is the shape POST /private/v1/users accepts: add
email and emailVerifiedAt, which Verified Inc does not return, and
the body is ready to send. Fields Verified did not share are absent,
so check that the ones CreateUserRequest requires are present before
forwarding.

The identityUuid is the same identifier the embed emits. If you do
not need to see the credentials, pass it to
POST /private/v1/users/one-click instead and ProphetX will resolve
them itself, keeping them out of your systems entirely.

This response carries the user's date of birth, legal name, address
and the last 4 of their SSN. Call it from your backend only, never a
browser, and do not log or persist the response body except where you
are permitted to hold that data.