Passwordless MFA SSO

Number of APIs: 8

  1. Step 2: Get the application secret GET {{apiPath}}/environments/{{envID}}/applications/{{passwordlessAppID}}/secret

  2. Step 3: Create the sign-on policy POST {{apiPath}}/environments/{{envID}}/signOnPolicies

  3. Step 4: Create the sign-on policy action POST {{apiPath}}/environments/{{envID}}/signOnPolicies/{{passwordlessPolicyID}}/actions

  4. Step 5: Assign the sign-on policy to an application POST {{apiPath}}/environments/{{envID}}/applications/{{passwordlessAppID}}/signOnPolicyAssignments

  5. Step 6: Enable MFA PUT {{apiPath}}/environments/{{envID}}/users/{{solutionUserID}}/mfaEnabled

  6. Step 7: Create MFA device (email) POST {{apiPath}}/environments/{{envID}}/users/{{solutionUserID}}/devices

  7. Step 1: Create a web application POST {{apiPath}}/environments/{{envID}}/applications

  8. Step 8: Send the authorize request GET {{authPath}}/{{envID}}/as/authorize?response_type=code&client_id={{passwordlessAppID}}&redirect_uri=http://localhost:3000/callback&scope=openid