---
title: "Create an SMS challenge"
method: POST
path: "/v1/mfa/challenges/sms"
tags: ["SMS challenges"]
---

# Create an SMS challenge

`POST /v1/mfa/challenges/sms`

This endpoint creates a 2FA challenge for the customer specified in the request body. Once the request has been processed, the customer will receive an SMS at their verified mobile number.

## Request body

- object
  - `person_id` string — ID of the person who should receive the SMS challenge.
  - `device_data` string — Base64 encoded device data as provided by Seon SDK. Details of Seon SDK integration can be found in the [device monitoring guide](https://docs.solarisgroup.com/guides/kyc/device-monitoring/).

## Response `202`

Accepted

- SMSChallenge — Helper sub-schema that contains a common set of fields for various challenge types
  - `id` string — The ID of the challenge.
  - `type` string — The type of the challenge.
  - `created_at` string — The date and time when the challenge was created.
  - `expires_at` string — The date and time when the challenge will expire (i.e., 5 minutes after creation).

## Other responses

- `400` — Validation error
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `409` — Conflict
- `429` — SMS request rate limit exceeded for the given mobile number.
- `500` — Internal server error

---

[API](https://skmtc.net/solarisgroup/apis/device-management.md) · [All operations](https://skmtc.net/solarisgroup/apis/device-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/device-management/revisions/80dd46738839/schema)