You can update identifiers of the authenticated account using this endpoint. The update attempt of email and phone identifiers needs verification. Those requests should be repeated with X-Challenge header filled with the verification code sent right after the first request.