Skip to main content

Start the approve-time TOTP challenge for an approval

POST 
/mfa/challenge/start/APPROVAL_REVIEW

Begins the approve-only MFA step-up for one approval request. Pass the approval's UUID as resourceIdentifier; the challenge is bound to it and to the calling approver. Returns the randomVerificationCode to submit on the verify leg.

This is the generic OTP challenge route with the APPROVAL_REVIEW type; only that type is documented here. It requires approvals.request.approve in the selected entity (the same gate as approving). Idempotent: starting an already-verified challenge returns MFA_ALREADY_VERIFIED.

Request​

Responses​

Challenge started