How it works
Copy challengeToken from the last challenge_required response; it expires after 180 seconds. For NEW_PASSWORD_REQUIRED send newPassword (14+ characters, mixed case, number and symbol, no spaces). For SMS_MFA, SOFTWARE_TOKEN_MFA or EMAIL_OTP send code instead. Never send both. Continue if a further challenge is returned. No token is issued before all mandatory challenges succeed.
Request body
challengeTokenstringrequiredmin length 1 · max length 12000newPasswordstringoptionalmin length 1 · max length 256codestringoptionalRequest essentials
- Authorization
- Not required
- X-Organization-Id
- Not required