Sign in

v1

latestOpenAPI 3.1.02026-07-26165182724.7 KB
Login

Complete unified SCA login

Submits the factor-specific proof and, on success, grants a new 180-day SCA session. Any prior active session for this user is revoked. — Required body fields per factor: sms needs challengeId and code (6-digit numeric); totp needs code (6 numeric digits or XXXXX-XXXXX recovery code); passkey needs origin and credential.

post/user/login/complete

Request body

userIdstring required
verificationMethod'sms' | 'totp' | 'passkey' required
ipstring required

Client IP address, recorded with the login event for audit purposes.

challengeIdstring

Required for sms.

codestring

6-digit OTP for sms / 6 digits or recovery code for totp.

originstring

Required for passkey — the browser-supplied origin.

Response

Login complete. SCA session granted.

statusstring required