The feedback API could submit feedback on behalf of an existing user. What it could not do was create a new one. There was no mechanism to authenticate a user who did not already exist in the system - so any submission from someone outside the portal had nowhere to land. That meant teams collecting feedback through their own surfaces had to pre-populate the portal with every user in advance, or accept that new submitters would have no user record, no company attribution, no status notifications, and no visibility into their own requests.

Pass-Through Identity removes that constraint by delegating authentication to the customer's own system. You vouch for who is submitting - passing their email, display name, and a stable user ID from your own application - and Craft.io creates the portal user on the spot, attaches them to the right company, and subscribes them to status notifications. No invitation, no sign-up, and no pre-registration required. If the same person submits again, Craft.io recognizes them and keeps their history in one place.

This is also the foundation the Feedback Widget is built on: the same identity mechanism works whether the submission comes from your backend with an API key or from a browser carrying a short-lived signed token your server mints.

To get started, include the submitter's email, display name, and a stable user ID in your payload, and post to the feedback submission endpoint with your account API key.