Skip to main content

Sign in with MFA


Use Sign in with MFA to verify the user’s authenticator app code during sign-in.

This screen appears after the user submits valid sign-in credentials and the account requires MFA.



This screen includes:

#ElementDescription
1Verification code modalRequests the user’s 6-digit authentication code.
2Modal titleDisplays Verification code.
3Close actionCloses the modal.
4Instruction textTells the user to check their authenticator app.
5Code input fieldsAccept the 6-digit verification code.
6Verify actionSubmits the verification code.
7Background sign-in screenShows the sign-in modal behind the verification modal.

Workflow

  1. Submit sign-in credentials.
  2. Display the MFA verification modal when MFA is enabled.
  3. Enter the 6-digit code from the authenticator app.
  4. Select Verify.
  5. Complete sign-in after successful verification.
  6. Keep the modal open when verification fails.

Validations

ScenarioApp behaviorSDK output
MFA requiredDisplay verification code modalmfa = required
Code missingDisable or block verificationvalidation = code_required
Code incompleteKeep verification blockedvalidation = code_incomplete
Code invalidDisplay validation errorerror = invalid_mfa_code
Code expiredDisplay validation errorerror = expired_mfa_code
MFA verification succeedsComplete sign-instate = authenticated
Request rejectedDisplay error statestatus = 405

Actions

ScenarioApp behaviorSDK output
MFA screen opensLoad MFA verification screenPUT /api/v3/sign-in/mfa
Code enteredUpdate code input statemfa = updated
Verify selectedSubmit MFA codePOST /api/v3/sign-in/mfa
Verification succeedsComplete sign-instate = authenticated
Close selectedClose MFA modalstate = dismissed
Request rejectedPreserve current statestate = unchanged

Endpoint Resources

MFA

PUT 

v3/sign-in/mfa

Returns the MFA verification screen for completing sign-in.

Sign In With MFA

POST 

v3/sign-in/mfa

Authenticates the user with sign-in credentials and verifies the MFA one-time code.

Query Parameters

NameTypeRequiredDescription
screen-modestringYesControls which sign-in experience to render.
emailstringYesAccount email address.
passwordstringYesAccount password.
mfastringYesOne-time code from the user’s authenticator app.