---
title: "Create a SCA session"
method: POST
path: "/v2/profiles/{profileId}/sca-sessions/authorise"
tags: ["sca-sessions"]
---

# Create a SCA session

`POST /v2/profiles/{profileId}/sca-sessions/authorise`

Manually triggers SCA, returning a one-time token along with a list of associated challenges. These challenges can be cleared with the verify endpoints.

## Path parameters

- `profileId` integer, required

## Headers

- `X-External-Correlation-Id` string, uuid

## Response `200`

A list of challenges to clear SCA.

- object
  - `oneTimeTokenProperties` OneTimeToken — A one-time token is generated when accessing an endpoint secured by SCA. This token includes a list of all available challenges to complete. You can use the [OTT status endpoint](/api-reference/sca-ott/ottstatusget) to view challenges and their statuses, or use [create SCA session](/api-reference/sca-sessions/scasessioncreate) to manually trigger SCA and return a one-time token.
    - `oneTimeToken` string, uuid — A one-time token unique identifier.
    - `challenges` object[] — An array of challenges.
      - `primaryChallenge` object
        - `type` string — A type of challenge.
      - `passed` boolean — The status of a challenge.
    - `validity` integer — The One-Time Token expiration in seconds.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)