v1
latestOpenAPI 3.1.02026-07-26165182724.7 KBBusiness Login
Start unified SCA login (business)
Issues a server-side challenge for the chosen factor. With sms the response carries challengeId + dateExpires and an OTP is dispatched. With passkey the response carries the WebAuthn assertion request (options, allowedOrigins, relyingPartyId) for the browser. With totp the response is { ok: true } — the operator reads the code from their authenticator app.
post/business/login/start
Request body
Example request
{
"businessId": "8b1d5f2a-3c4e-4a6b-9f0d-7e2c1a4b5d6e"
}Response
Factor-specific challenge. The populated fields depend on verificationMethod: sms returns challengeId + dateExpires; passkey returns options + allowedOrigins + relyingPartyId; totp returns ok.