v1

latestOpenAPI 3.1.02026-07-26165182724.7 KB

Business Login

Complete unified SCA login (business)

Submits the factor-specific proof and, on success, grants a new 180-day SCA session for the business. Any prior active session for this business is revoked. — Required body fields per factor: sms needs challengeId and code (6-digit numeric); totp needs code (6 numeric digits or XXXXX-XXXXX recovery code); passkey needs origin and credential.

post/business/login/complete

Request body

businessIdstring uuid required

verificationMethod'sms' | 'totp' | 'passkey' required

ipstring required

Client IP address, recorded with the login event for audit purposes.

challengeIdstring

Required for sms.

codestring

6-digit OTP for sms / 6 digits or recovery code for totp.

originstring

Required for passkey — the browser-supplied origin.

Example request

{
  "businessId": "8b1d5f2a-3c4e-4a6b-9f0d-7e2c1a4b5d6e"
}

Response

statusstring required