Skip to main content

Start mfa challenge

Mint a fresh MFA challenge for the current authenticated session so the SPA can satisfy a step_up_required denial. Optionally filters eligible factors against an inbound StepUpRequirement hint. Returns enrollment_required when no enrolled factor matches the requirement so the SPA can route the user into enrollment instead of getting stuck.

POST /auth/mfa/start

note

SDK method: startMFAChallenge Security: authenticated (policy: none)

Request body (application/json)​

Accepts a StepUpStartRequest object.

Response​

200 OK — Returns a StepUpStartResponse object.