Retry indirect provisioning
Re-runs the provisioning saga, from the top, for an indirect still in PENDING_PROVISIONING. Call it after a registration (or an earlier retry) came back with provisioning.failedStep set — that field names where the saga stopped: validateISPB, createPIAccount or markActive.
Every step is idempotent, so repeating this is safe: the ISPB check is pure, the @pi_{ispb} account creation reuses the existing account when the alias is already taken (including the account a previously CLOSED indirect left behind, which is unblocked and re-enabled), and the final step is guarded by the lifecycle state machine. On success the row is ACTIVE, the failed-step marker is cleared, and the participant becomes routable. The response status is 202, but the saga has ALREADY run when it returns — read status and provisioning.failedStep off the body rather than treating the 202 as “accepted, outcome later”.
Unlike registration, a retry SURFACES a saga failure as an error instead of a success body: it is an explicit operator action expecting a verdict, and the row is left in PENDING_PROVISIONING for another attempt. Refusals: 409 PIX-0097 when the indirect is not in PENDING_PROVISIONING — ACTIVE means there is nothing to retry, and SUSPENDED/CLOSED are not retryable states; 404 PIX-0095 for an unknown id; 422 PIX-0098 when indirectId is not a valid UUID, or when JD directory validation is enabled and the ISPB is not a registered SPI participant there; 502 PIX-0099 when a step failed on a retryable infrastructure fault, naming the step in the message — the indirect stays pending, so retry.
Authorizations
JWT bearer token issued by the identity provider.
Path Parameters
The indirect participant id.
"018f2b7c-0000-7000-8000-000000000000"
Response
Accepted
Creation timestamp (UTC).
Delivery endpoint (secret redacted).
The indirect participant id (routing identifier).
"018f2b7c-0000-7000-8000-000000000000"
The indirect PSP's ISPB.
"12345678"
Delivery mode.
"raw"
Display name.
"Indirect PSP Ltda"
The derived @pi_{ispb} Midaz account alias.
"@pi_12345678"
Provisioning-saga state.
Own-QR-code certificate configuration.
Lifecycle status.
"ACTIVE"
Last-update timestamp (UTC).

