# Authenticate after Create for Trusted application

**URL:** <https://devforum.okta.com/t/authenticate-after-create-for-trusted-application/2367>\
**Category:** Questions\
**Created:** [August 7, 2018, 8:45pm UTC](https://devforum.okta.com/t/authenticate-after-create-for-trusted-application/2367 "2018-08-07T20:45:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![humblesticker](https://avatars.discourse-cdn.com/v4/letter/h/d78d45/32.png) [@humblesticker](https://devforum.okta.com/u/humblesticker)\
**Post date:** [August 7, 2018, 8:45pm UTC](https://devforum.okta.com/t/authenticate-after-create-for-trusted-application/2367/1 "2018-08-07T20:45:16Z")

</div>

Hi all.

```auto
1)
{{url}}/api/v1/users?activate=true
with headers 
Authroization: SSWS {{apikey}}

{
  "profile": {
  	"firstName": "A",
    "lastName": "5login",
    "email": "5login@gmail.com",
    "login": "5login"
  },
  "credentials": {
    "password" : { "value": "Password111" }
  }
}

2)
{{url}}/api/v1/authn

with headers 
Authroization: SSWS {{apikey}}
X-Device-Fingerprint: fingerprint1

{
  "username": "5login",
  "password" : "Password111"
}  

```

I am getting SUCCESS state for authentication in step 2 instead of MFA\_REQUIRED.  
If I drop X-Device-Fingerprint it returns MFA\_REQUIRED as expected.

Does anyone has a clue why Okta behaves this way? Is there anyway to get MFA\_REQUIRED while sending X-Device-Fingerprint?

Thanks.  
Brian.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [January 12, 2024, 10:51pm UTC](https://devforum.okta.com/t/authenticate-after-create-for-trusted-application/2367/2 "2024-01-12T22:51:15Z")

</div>

Closed on January 12, 2024, 10:51pm UTC