Skip to main content

Generate an OTP challenge

POST 
/nevisidm/api/auth/v1/:clientExtId/users/:userExtId/otp/challenge

Since: 8.2605.0, 9.2605.0

Required permission(s): AccessControl.CredentialView

Generates an OTP challenge for the user's most recent OTP card credential.

The challenge value is stored on the credential and must be supplied back in the login request together with the user's OTP device response. If the credential is disabled or outside its validity period, a 403 error is returned. The credential must exist and be accessible, otherwise a 404 error is returned.

Request​

Responses​

OTP challenge generated. The challenge value may be null if generation was not possible.

Last updated on