/challenge/requirements

Request

Returns the list of authenticator enrollments available for MFA challenge in a direct authentication flow. Use this endpoint after the token endpoint responds with mfa_required to discover which MFA authenticators the user can use.

Note: The /challenge/requirements endpoint requires client authentication. The method is configured per client app. See Client authentication methods.

Path

authorizationServerIdstringrequired

id of the authorization server

Bodyapplication/x-www-form-urlencoded

challenge_types_supportedstring

Space-separated list of direct authentication challenge types supported by the client

mfa_tokenstringrequired

The token returned from a previous token request identifying the multifactor authentication transaction

curl -i -X POST \
  'https://subdomain.okta.com/oauth2/{authorizationServerId}/v1/challenge/requirements' \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  -d mfa_token=Qwk9va6QYgR3s7JMiWUm \
  -d 'challenge_types_supported=http://auth0.com/oauth/grant-type/mfa-oob http://auth0.com/oauth/grant-type/mfa-otp'

Responses

Returns the list of authenticator enrollments available for the user.

Bodyapplication/json

requirementsobject

Response

{
  "requirements": {
    "challenge": [ … ]
  }
}