---
title: "Update challenge ID"
method: PATCH
path: "/v1/psd2/challenges/{psd2_challenge_id}"
tags: ["PSD2 account payment and consent"]
---

# Update challenge ID

`PATCH /v1/psd2/challenges/{psd2_challenge_id}`

This endpoint updates the status of a `psd2_challenge_id`. After a customer enters their credentials on your login screen, use this endpoint to update the status of the `psd2_challenge_id` and include the `person_id` in the payload.<br> If successful, the API returns a `redirect_URL` for the second-factor authentication (done by Solaris). You have to redirect the customer to this URL to perform the 2FA.<br> Expected error messages: <ol> <li>401 - Unauthorized: The ChallengeID is expired.</li> <li>404 - Not found: The ChallengeID doesn't exist.</li> <li>400 - General Bad Request: The IBAN requested by the TPP does not belong to the specified person.</li> </ol>

## Path parameters

- `psd2_challenge_id` string, required

## Request body

- SolarisDecoratorsPSD2ChallengePatchRequest
  - `person_id` string, string, required — The Solaris person ID associated with the PSD2 challenge.

## Response `200`

The operation was successful.

- SolarisDecoratorsPSD2ChallengePatchResponse
  - `person_id` string — The Solaris person ID associated with the PSD2 request.
  - `redirect_url` string — The redirect URL where you must send the customer after authentication.

## Other responses

- `400` — Invalid request.
- `401` — The challenge expired.
- `403` — You are not authorized to perform this action.
- `404` — The requested resource could not be found.
- `500` — Internal server error.

---

[API](https://skmtc.net/solarisgroup/apis/compliance-features.md) · [All operations](https://skmtc.net/solarisgroup/apis/compliance-features/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/compliance-features/revisions/61701b027c74/schema)