Factors API, Send SMS Challenge vs Verify SMS Factor

I’m looking to use the Rest API to send an SMS Challenge to my phone, then verify I possess the correct challenge value.

I’ve downloaded the Postman Factors collection from the developer site, but the Challenge and Verify Post calls both have the exact same URI ({{url}}/api/v1/users/{{userId}}/factors/{{factorId}}/verify) and Body ({“passCode”: 382883"})

This seems correct for the Verify call, but not the Challenge call. Is the Challenge call not correct in the current Postman collection on the developer site?

Does anyone have the correct Challenge URI?


The URI is the same for the challenge and verification. You POST to the URI to send a passcode to the device, then you POST again with the passcode included in the body to verify it. If you include the right passcode then you’ll get a success response. If the passcode is incorrect, you’ll get a 403 error I believe.