diff --git a/lib/types/identity-service-types.js b/lib/types/identity-service-types.js
--- a/lib/types/identity-service-types.js
+++ b/lib/types/identity-service-types.js
@@ -23,3 +23,9 @@
   +deleteUser: () => Promise<mixed>,
   ...
 };
+
+export type IdentityServiceAuthLayer = {
+  +userID: string,
+  +deviceID: string,
+  +commServicesAccessToken: string,
+};
diff --git a/web/grpc/identity-service-client-wrapper.js b/web/grpc/identity-service-client-wrapper.js
new file mode 100644
--- /dev/null
+++ b/web/grpc/identity-service-client-wrapper.js
@@ -0,0 +1,102 @@
+// @flow
+
+import type { IdentityServiceAuthLayer } from 'lib/types/identity-service-types.js';
+
+import { VersionInterceptor, AuthInterceptor } from './interceptor.js';
+import * as IdentityAuthClient from '../protobufs/identity-auth-client.cjs';
+import * as IdentityClient from '../protobufs/identity-client.cjs';
+import { Empty } from '../protobufs/identity-structs.cjs';
+
+class IdentityServiceClientWrapper {
+  authClient: ?IdentityAuthClient.IdentityClientServicePromiseClient;
+  unauthorizedClient: ?IdentityClient.IdentityClientServicePromiseClient;
+
+  constructor() {
+    this.authClient = null;
+    this.unauthorizedClient = null;
+  }
+
+  determineSocketAddr(): string {
+    let identitySocketAddr;
+
+    const identityServiceConfigRaw = process.env.IDENTITY_SERVICE_CONFIG;
+
+    if (typeof identityServiceConfigRaw === 'string') {
+      try {
+        const identityServiceConfig = JSON.parse(identityServiceConfigRaw);
+        identitySocketAddr = identityServiceConfig.identitySocketAddr;
+      } catch (error) {
+        console.error(
+          'Error parsing IDENTITY_SERVICE_CONFIG as string:',
+          error,
+        );
+      }
+    } else if (
+      typeof identityServiceConfigRaw === 'object' &&
+      identityServiceConfigRaw !== null
+    ) {
+      identitySocketAddr = identityServiceConfigRaw.identitySocketAddr;
+    }
+
+    return (
+      identitySocketAddr ||
+      (process.env.NODE_ENV === 'development'
+        ? 'https://identity.staging.commtechnologies.org:50054'
+        : 'https://identity.commtechnologies.org:50054')
+    );
+  }
+
+  async initAuthClient(authLayer: IdentityServiceAuthLayer): Promise<void> {
+    const { userID, deviceID, commServicesAccessToken } = authLayer;
+
+    const identitySocketAddr = this.determineSocketAddr();
+
+    const versionInterceptor = new VersionInterceptor<Request, Response>();
+    const authInterceptor = new AuthInterceptor<Request, Response>(
+      userID,
+      deviceID,
+      commServicesAccessToken,
+    );
+
+    const authClientOpts = {
+      unaryInterceptors: [versionInterceptor, authInterceptor],
+    };
+
+    this.authClient = new IdentityAuthClient.IdentityClientServicePromiseClient(
+      identitySocketAddr,
+      null,
+      authClientOpts,
+    );
+  }
+
+  async initUnauthorizedClient(): Promise<void> {
+    const identitySocketAddr = this.determineSocketAddr();
+
+    const versionInterceptor = new VersionInterceptor<Request, Response>();
+
+    const unauthorizedClientOpts = {
+      unaryInterceptors: [versionInterceptor],
+    };
+
+    this.unauthorizedClient =
+      new IdentityClient.IdentityClientServicePromiseClient(
+        identitySocketAddr,
+        null,
+        unauthorizedClientOpts,
+      );
+  }
+
+  async deleteUser(authLayer: IdentityServiceAuthLayer): Promise<void> {
+    if (!this.authClient) {
+      await this.initAuthClient(authLayer);
+    }
+
+    if (this.authClient) {
+      await this.authClient.deleteUser(new Empty());
+    } else {
+      throw new Error('Identity service client is not initialized');
+    }
+  }
+}
+
+export { IdentityServiceClientWrapper };