Step 3: Valdiate the OTP
POST {{HOST}}/admin/v1/MyAuthenticationFactorValidator
This step validates the user’s EMAIL enrollment in a POST request to the /admin/v1/MyAuthenticationFactorValidator endpoint.
The client must include the following attributes:
- otpCode: the code received by the user
- deviceId: received in the Step 2 response
- requestId: received in the Step 2 response
In the response, the attribute mfaStatus:ENROLLED
indicates that user has enrolled for MFA. The preferredAuthenticationFactor attr indicates the factor set as the preferred method. in this case, it is EMAIL.
Request Body
{"schemas"=>["urn:ietf:params:scim:schemas:oracle:idcs:AuthenticationFactorValidator"], "deviceId"=>"bcb65790a29143ca960fa67fb530da63", "requestId"=>"f8ee0085-1091-4eb3-b1d4-657ea6e1f3b7o-o1541112590", "otpCode"=>"720335", "authFactor"=>"EMAIL", "scenario"=>"ENROLLMENT"}
HEADERS
| Key | Datatype | Required | Description |
|---|---|---|---|
Content-Type | string | ||
Authorization | string |
RESPONSES
status: Created
{"schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuthenticationFactorValidator"],"deviceId":"bcb65790a29143ca960fa67fb530da63","requestId":"f8ee0085-1091-4eb3-b1d4-657ea6e1f3b7o-o1541112590","otpCode":"720335","authFactor":"EMAIL","scenario":"ENROLLMENT","meta":{"resourceType":"MyAuthenticationFactorValidator","location":"https://example.identiycloud.com/admin/v1/MyAuthenticationFactorValidator"},"status":"SUCCESS","displayName":"joe.bloggs@example.com","mfaStatus":"ENROLLED","mfaPreferredDevice":"bcb65790a29143ca960fa67fb530da63","mfaPreferredAuthenticationFactor":"EMAIL","securityQuestionsPresent":false,"devicesCount":1}