---
title: "aid_customers_mfa_login_post"
method: POST
path: "/accounts/{aid}/customers/mfa_login"
tags: ["password"]
---

# aid_customers_mfa_login_post

`POST /accounts/{aid}/customers/mfa_login`

Initiate a Multi-Factor Authentication for a customer user, the caller must
have scope `write:accounts:/auth/users` to perform a login.
Post the `ident_type`, along with the `ident` and `secret`.
The server will return a challenge response specifying the
`challenge_type` that will have to be completed to when getting an access
token from the `POST /v1/accounts/{oid}/auth/token` endpoint.
scopes:
- write:accounts:/auth/users

## Path parameters

- `aid` string, ^[PT]{1}\d{8}$, required

## Request body

- object
  - `ident_type` 'phone_number' | 'email', required
  - `ident` string, required — Email or phone_number, depending on the `ident_type`.
  - `audience` string, required — The unique identifier of the target API you want to access. The audience must be a grant associated with the client used when calling this resource.
  - `type` 'customer' | 'company', required — user type to login, required as users with different type can share email
  - `secret` string, required — The customers pin or password.

## Response `200`

MFA login challenge

- MultiFactorAuthenticationChallenge
  - `links` object[], required
    - `rel` 'mfa_challenge' | 'mfa_oob', required
    - `href` string, required
  - `mfa_token` string, required — MFA challenge token
  - `challenge_type` 'oob', required — MFA challenge types - `oob` (out of band) means that the user will get an out of band message containing a `binding_code` that will have to be submitted along with the `mfa_token` when answering the mfa challenge
  - `oob_channel` 'sms' | 'email' — The channel to use for OOB

## Other responses

- `400` — Bad / Invalid request
- `401` — Access forbidden, invalid JWT token was used
- `403` — Forbidden
- `500` — Unexpected Error

---

[API](https://skmtc.net/dintero/apis/account-management-api.md) · [All operations](https://skmtc.net/dintero/apis/account-management-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/dintero/account-management-api/revisions/9b83a4199008/schema)