---
title: "Initiate MFA Challenge"
method: POST
path: "/v1/login/mfa/challenge"
tags: ["MFA API"]
---

# Initiate MFA Challenge

`POST /v1/login/mfa/challenge`

Use this endpoint to request a new MFA verification code sent via email or SMS. This is useful when the user needs a fresh code or wants to switch to a different MFA method.

Requires a valid `mfaToken` obtained from the access token endpoint.

## Request body

- MFAChallengeInput — Information used to request a new MFA verification code via email or SMS.
  - `mfaToken` string, required — The temporary MFA token received from the access token endpoint.
  - `mfaType` 'app' | 'email' | 'sms', required — The MFA method to use for the challenge.

## Response `200`

The MFA challenge was initiated. A verification code has been sent through the requested method.

- object
  - `message` string — Confirmation that the challenge was initiated.

## Other responses

- `400`
- `401`
- `429`
- `500`

---

[API](https://skmtc.net/lerian/apis/identity-plugin.md) · [All operations](https://skmtc.net/lerian/apis/identity-plugin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lerian/identity-plugin/versions/25daba385532/schema)