---
title: "Issuer’s endpoint to handle VCAS stepup flow"
method: POST
path: "/issuer-vcas-stepup-endpoint"
tags: ["VCAS"]
---

# Issuer’s endpoint to handle VCAS stepup flow

`POST /issuer-vcas-stepup-endpoint`

Informs VCAS which authentication types are available for a specific user.

## Request body

- VCASStepUpRequest
  - `id` string, required — Pismo-generated unique authentication ID
  - `provider` 'VCAS', required — Third-party provider name
  - `type` 'STEPUP', required — Operation performed
  - `card` Card, required
    - `id` integer — Enrolled card ID
    - `mode_id` integer — Card mode ID
    - `type` 'PLASTIC' | 'VIRTUAL' | 'RECURRING' | 'TEMPORARY' — Card type
    - `hash` string — Encrypted PAN using 2048 rsa key and base64 encoded. Pismo provides the encrypt/decrypt keys for this field.
    - `bin` string — Card BIN (Bank Identification Number)
    - `last_four_digits` string — Card last four PAN digits
  - `account` AccountV2, required
    - `id` integer — Account ID
    - `document_number` string — Cardholder government document number. This can be from any document that identifies the cardholder such as a Tax ID, State ID, or driver's license.
    - `phones` StructuredPhone[]
      - `area_code` string — Area code of the phone number
      - `country_code` string — Country code of the phone number
      - `number` string — Phone number without area code
      - `type` string — Type of phone number (e.g., mobile, commercial, residential)
    - `email` string — E-mail
  - `program` Program, required
    - `id` integer — Program ID
  - `customer` Customer, required
    - `id` integer — Pismo customer ID.
  - `raw_provider` RawProvider, required — All non-PCI information received from provider. Check provider documentation for details.

## Response `200`

OK

- VCASStepUpResponse
  - `raw_response` object — Raw response to VCAS StepUp request, according with VCAS documentation.

---

[API](https://skmtc.net/pismo/apis/platform-authentication.md) · [All operations](https://skmtc.net/pismo/apis/platform-authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pismo/platform-authentication/revisions/935b62e16de4/schema)