Create AAL2 Challenge
IAS
Create AAL2 Challenge
Issues a fresh multifactor challenge for a verified user.
POST
Create AAL2 Challenge
Returns a single-use URL where the user authenticates with their enrolled authenticator. After the
user satisfies the challenge, they’re redirected to your
redirectUrl with
?aal2SessionId=aal2_...&status=verified appended. Pass the aal2SessionId on subsequent
IAS-purposed queries via the x-aal2-session header.
Body
string
required
The verified identity to challenge. Must be in
active
status.string
required
HTTPS URL on your account’s allowlist.
Response
string
required
Unique identifier for this AAL2 challenge.
string
required
Single-use URL for the user to complete the challenge.
string
required
ISO-8601 timestamp when the challenge URL expires.
string
required
How the user will complete the challenge:
totp is a time-based one-time password from an
authenticator app (e.g. Google Authenticator, 1Password). webauthn is a Web Authentication
challenge in the browser (passkey or security key).Response

