Step 3: Valdiate the OTP

POST {{stripeUrl}}/admin/v1/MyAuthenticationFactorValidator

This step validates the user’s SMS enrollment in a POST request to the /admin/v1/MyAuthenticationFactorValidator endpoint.

The client must include the following attributes:

  • otpCode: the code received by the user
  • deviceId: received in the Step 2 response
  • requestId: received in the Step 2 response

In the response, the attribute mfaStatus:ENROLLED indicates that user has enrolled for MFA. The preferredAuthenticationFactor attr indicates the factor set as the preferred method. in this case, it is SMS.

Request Body

{"schemas"=>["urn:ietf:params:scim:schemas:oracle:idcs:AuthenticationFactorValidator"], "deviceId"=>"92142250e2ab4608b5c6532eb73e3d7c", "requestId"=>"a0a7f9bf-13a8-43f3-bcc7-2087dc3f7a18o-o1548346179", "otpCode"=>"191224", "authFactor"=>"SMS", "scenario"=>"ENROLLMENT"}

HEADERS

KeyDatatypeRequiredDescription
Content-Typestring
Authorizationstring
Datestring
x-content-sha256string

RESPONSES

status: Created

{"authFactor":"SMS","deviceId":"92142250e2ab4608b5c6532eb73e3d7c","requestId":"a0a7f9bf-13a8-43f3-bcc7-2087dc3f7a18o-o1548346179","scenario":"ENROLLMENT","status":"SUCCESS","displayName":"Joes's Personal Phone","schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuthenticationFactorValidator"],"mfaStatus":"ENROLLED","mfaPreferredDevice":"2b27b8c072d64b899d41c8470acea32a","mfaPreferredAuthenticationFactor":"SMS","securityQuestionsPresent":false,"devicesCount":3,"emailFactorEnrolled":true}