To remove credential identifiers from an existing Ory identity, you can use the

DELETE /admin/identities/{id}/credentials/{type}

API endpoint. This endpoint allows you to delete an identity credential by its type. However, please note that you cannot delete password or code auth credentials through this API. Here is the structure of the API call:

http DELETE /admin/identities/{id}/credentials/{type}

Where: -

{id}

is the identity's ID. -

{type}

is the type of credentials to delete. The possible types are: 'password', 'oidc', 'totp', 'lookup_secret', 'webauthn', 'code', 'passkey', 'profile', 'link_recovery', 'code_recovery'. If you are deleting an OIDC credential, you can specify the identifier of the OIDC credential to delete as a query parameter. You can find the identifier by calling the

GET /admin/identities/{id}?include_credential=oidc

endpoint. Please note that to perform this operation, you must be authenticated by means of the

oryAccessToken

. If the operation is successful, you will receive a 204 No Content response. If the identity or credential type does not exist, you will receive a 404 Not Found response with a JSON API Error Response. For more details, please refer to the [Ory API Reference](https://www.ory.sh/docs/reference/api). Alternatively, if you are using the Ory CLI, you can use the

ory delete identity

command to delete one or more identities by their ID(s). However, this command deletes the entire identity, not just specific credentials. For more details on this, please refer to the [Ory CLI Documentation](https://www.ory.sh/docs/cli/ory-delete-identity).