---
title: "List enrolled SCA factors"
method: GET
path: "/sca/factors"
tags: ["Strong Customer Authentication"]
---

# List enrolled SCA factors

`GET /sca/factors`

List the Strong Customer Authentication factors the customer has enrolled.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.

## Response `200`

The customer's enrolled SCA factors.

- ScaFactorList — The Strong Customer Authentication factors a customer has enrolled.
  - `factors` ScaFactorView[], required — The customer's enrolled SCA factors.
    - `factor` 'SMS_OTP' | 'TOTP' | 'PASSKEY', required — A Strong Customer Authentication factor. | Factor | Description | |--------|-------------| | `SMS_OTP` | One-time code sent by SMS to the customer's verified phone. Requires no prior enrollment. | | `TOTP` | Time-based one-time code from an authenticator app. Requires enrollment. Not valid for per-transaction challenges (cannot carry dynamic linking). | | `PASSKEY` | WebAuthn passkey assertion. Requires enrollment. |
    - `credentialId` string — The per-credential id, populated only for `PASSKEY` factors (the id passed to delete a passkey). Omitted for `TOTP` and `SMS_OTP`, which have no per-credential id.
    - `name` string — An optional human-readable label for this factor.

## Other responses

- `401` — Unauthorized
- `404` — Customer not found
- `409` — SCA is not required for this customer.
- `500` — Internal service error

---

[API](https://skmtc.net/stainless-api/apis/grid-api.md) · [All operations](https://skmtc.net/stainless-api/apis/grid-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stainless-api/grid-api/versions/526036c12609/schema)