Refreshes the short-lived provider SDK sessionToken for an existing legacy identity verification. Returns sessionTokenExpiresAt when the provider supplies an expiry. The token is not a URL and is not returned by list or get. Each call issues a fresh credential; responses are not cached or replayed. For an Account-owned Stakeholder or legacy representative verification, select X-Wingspan-Account. The identity must remain active, committed and Account-supplied. A changed identity record or vault returns 409; a private Person-owned identity returns 403. Each Stakeholder receives its own token and result.

A sole proprietor whose person id is also their account id can reach a verification keyed on that account. It resumes under the rules of POST /compliance/biometric-identity-verifications/{biometricIdentityVerificationId}/start: 422 with detailCode users.BiometricIdentityVerificationPrincipalRequired or users.BiometricIdentityVerificationPrincipalComplianceEntityRequired, 403 when the account's principal is now another person whose compliance entity belongs to that person, and 409 when the verification changed while resuming or an earlier attempt is still under review.