Complete unified SCA login

Submits the factor-specific proof and, on success, grants a new 180-day SCA session. Any prior active session for this user is revoked. — Required body fields per factor: sms needs challengeId and code (6-digit numeric); totp needs code (6 numeric digits or XXXXX-XXXXX recovery code); passkey needs origin and credential.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required
string
enum
required
Allowed:
string
required

Client IP. The auth provider records this against the login event in its audit log.

string

Required for sms.

string

6-digit OTP for sms / 6 digits or recovery code for totp.

string

Required for passkey — the browser-supplied origin.

credential
object

WebAuthn PublicKeyCredential from navigator.credentials.get(). Required for passkey.

Responses

Language
Credentials
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json