Skip to main content

Initiate verification

POST 
/verification-srv/authentication/:method/initiation

This API call is used to initiate the verification of the user depending on the type of verification configured.

This is a public API that requires no groups or roles but requires a valid request_id and identifier (email, mobile, or username) or medium_id. The information about the medium_id and which methods are available you retrieve in the verification List API. For more information about the authentication process, there is an overview for each verification method.

Validation Steps Performed:

  1. Validates request_id and usage_type are present and valid
  2. Validates usage_type is one of: INITIAL_AUTHENTICATION, PASSWORDLESS_AUTHENTICATION, or MULTIFACTOR_AUTHENTICATION
  3. Validates single_factor_auth is only allowed for FACE method
  4. Validates verification method is allowed for the app (checks app-level MFA configuration)
  5. Validates verification method is active/enabled
  6. Validates masked sub (q parameter) if provided
  7. Validates user exists and can be fetched by identifier or medium_id
  8. Validates physical verification is configured for the user and method
  9. Performs Fraud Detection System (FDS) checks for suspicious activity
  10. Validates device information and location details

Request​

Responses​

SUCCESS