v1
latestOpenAPI 3.1.02026-07-26165182724.7 KBLogin
Start unified SCA login
Issues a server-side challenge for the chosen factor. With sms the response carries challengeId + dateExpires and an OTP is dispatched. With passkey the response carries the WebAuthn assertion request (options, allowedOrigins, relyingPartyId) for the browser. With totp the response is { ok: true } — the user reads the code from their authenticator app.
post/user/login/start
Request body
Response
Factor-specific challenge. The populated fields depend on verificationMethod: sms returns challengeId + dateExpires; passkey returns options + allowedOrigins + relyingPartyId; totp returns ok.