Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi all,
I wanted to confirm what is the best practice for updating Kratos User Identities.

Lets say I have a user with some identity saved in identities table of Kratos DB.
Now for updating their identity should I be using a Settings Flow (thru POST <https://www.ory.sh/self-service/settings>) or Admin flow (thru PUT <https://www.ory.sh/admin/identities/{id}>).

I was thinking that if the user tries to update their identity then *Settings Flow* should be used and when an _administrator_ on our platform tries to update other users’ identities then Admin flow is to be used. But not sure if it matters which is being as at the end the result is kind of same.
Would love to know others’ opinions.

Thanks!

Hello <@U03GVLWCMP0>

That is correct, the user should use the settings flow and as admin you can update via updateIdentity or patchIdentity

Thanks for the reply :pray:
Makes sense :+1: