# Stytch Docs: API & SDK reference B2B API Mobile SDKs iOS SDK ## iOS SDK - [Stytch iOS B2B SDK Overview](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/overview.md): Get started with the Stytch iOS B2B SDK for building secure authentication flows for business applications - [Installation](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/installation.md): How to install and set up the Stytch B2B SDK in your iOS application. - [Changelog](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/changelog.md): Version history and updates for the Stytch iOS SDK - [Quickstart](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/quickstart.md): How to quickly get up and running with the Stytch iOS SDK - [Upgrade Guide](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/upgrade-guide.md): How to upgrade between major versions of the SDK ### Methods #### Sessions - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sessions/authenticate.md): Validates the current member session token against the Stytch backend and optionally extends the session. Calls the `POST /sdk/v1/b2b/sessions/authenticate` endpoint. - [Revoke](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sessions/revoke.md): Revokes the current member session, signing the member out on the backend and clearing local session state. Calls the `POST /sdk/v1/b2b/sessions/revoke` endpoint. - [Exchange](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sessions/exchange.md): Exchanges the current member session for a session in a different organization. Calls the `POST /sdk/v1/b2b/sessions/exchange` endpoint. The member must belong to the target organization. - [Exchange Access Token](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sessions/exchange-access-token.md): Exchanges the current member session for an OAuth access token for a connected provider. Calls the `POST /sdk/v1/b2b/sessions/exchange_access_token` endpoint. - [Attest](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sessions/attest.md): Attests the current member session using a Stytch Trusted Auth Token. Calls the `POST /sdk/v1/b2b/sessions/attest` endpoint. #### Email Magic Links - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/email-magic-links/authenticate.md): Authenticates a magic link token received via deeplink, establishing a member session. Calls the `POST /sdk/v1/b2b/magic_links/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [B2BEmailMagicLinksClient.loginOrSignup] call, and automatically includes the interm… ##### Email - [Login Or Signup](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/email-magic-links/email/login-or-signup.md): Sends a magic link email to the provided address for login or signup within an organization. Calls the `POST /sdk/v1/b2b/magic_links/email/login_or_signup` endpoint. Generates and stores a PKCE code pair for use in the subsequent [B2BMagicLinksClient.authenticate] call. - [Invite](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/email-magic-links/email/invite.md): Sends a magic link invitation email to a new member of the organization. Calls the `POST /sdk/v1/b2b/magic_links/email/invite` endpoint. Requires an active session. ##### Discovery - [Email Send](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/email-magic-links/discovery/email-send.md): Sends a discovery magic link email to enumerate the organizations associated with the given email address. Calls the `POST /sdk/v1/b2b/magic_links/email/discovery/send` endpoint. Generates and stores a PKCE code pair for use in the subsequent [authenticate] call. - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/email-magic-links/discovery/authenticate.md): Authenticates the discovery magic link token received via deeplink, returning an intermediate session token and the list of discovered organizations. Calls the `POST /sdk/v1/b2b/magic_links/discovery/authenticate` endpoint. Retrieves the PKCE code verifier stored during the corresponding [emailSend]… #### OTPs ##### Sms - [Send](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/sms/send.md): Sends an SMS OTP to the member's phone number for MFA verification. Calls the `POST /sdk/v1/b2b/otps/sms/send` endpoint. Automatically includes the intermediate session token if one is present. - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/sms/authenticate.md): Authenticates an SMS OTP code submitted by the member, completing the MFA step. Calls the `POST /sdk/v1/b2b/otps/sms/authenticate` endpoint. Automatically includes the intermediate session token if one is present. ##### Email - [Login Or Signup](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/email/login-or-signup.md): Sends an email OTP to the provided address for login or signup within the organization. Calls the `POST /sdk/v1/b2b/otps/email/login_or_signup` endpoint. - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/email/authenticate.md): Authenticates an email OTP code submitted by the member, completing the authentication step. Calls the `POST /sdk/v1/b2b/otps/email/authenticate` endpoint. Automatically includes the intermediate session token if one is present. ###### Discovery - [Send](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/email/discovery/send.md): Sends a discovery email OTP to enumerate the organizations associated with the given email address. Calls the `POST /sdk/v1/b2b/otps/email/discovery/send` endpoint. - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/otps/email/discovery/authenticate.md): Authenticates the discovery email OTP, returning an intermediate session token and the list of discovered organizations. Calls the `POST /sdk/v1/b2b/otps/email/discovery/authenticate` endpoint. #### Passwords - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/authenticate.md): Authenticates a member with their email address and password, establishing a member session. Calls the `POST /sdk/v1/b2b/passwords/authenticate` endpoint. Automatically includes the intermediate session token if one is present. - [Strength Check](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/strength-check.md): Checks the strength of a password and returns a score with actionable feedback. Calls the `POST /sdk/v1/b2b/passwords/strength_check` endpoint. Does not require a session. ##### Email - [Reset Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/email/reset-start.md): Initiates an email-based password reset by sending a reset link to the member's email address. Calls the `POST /sdk/v1/b2b/passwords/email/reset/start` endpoint. Generates and stores a PKCE code pair for use in the subsequent [reset] call. - [Reset](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/email/reset.md): Completes the email password reset flow by setting a new password using the token from the reset link. Calls the `POST /sdk/v1/b2b/passwords/email/reset` endpoint. Retrieves the PKCE code verifier stored during the corresponding [resetStart] call, and automatically includes the intermediate session… ##### Existing Password - [Reset](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/existing-password/reset.md): Resets a member's password by verifying their existing password, then setting a new one. Calls the `POST /sdk/v1/b2b/passwords/existing_password/reset` endpoint. ##### Session - [Reset](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/passwords/session/reset.md): Resets a member's password using their active session for verification (no existing password required). Calls the `POST /sdk/v1/b2b/passwords/session/reset` endpoint. Requires an active session. #### TOTPs - [Create](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/totps/create.md): Creates a new TOTP instance for the current member and returns the secret, QR code URL, and recovery codes. Calls the `POST /sdk/v1/b2b/totp` endpoint. Automatically includes the intermediate session token if one is present. The member should scan the QR code with their authenticator app, then call… - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/totps/authenticate.md): Authenticates a TOTP code from the member's authenticator app, completing the MFA step. Calls the `POST /sdk/v1/b2b/totp/authenticate` endpoint. Automatically includes the intermediate session token if one is present. #### Discovery ##### Organizations - [List](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/organizations/list.md): Lists all organizations discoverable for the authenticated user. Calls the `POST /sdk/v1/b2b/discovery/organizations` endpoint. Automatically includes the intermediate session token if one is present. - [Create](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/organizations/create.md): Creates a new organization and immediately establishes a member session within it. Calls the `POST /sdk/v1/b2b/discovery/organizations/create` endpoint. Automatically includes the intermediate session token if one is present. ##### Intermediate Sessions - [Exchange](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/intermediate-sessions/exchange.md): Exchanges an intermediate session token for a full member session in the selected organization. Calls the `POST /sdk/v1/b2b/discovery/intermediate_sessions/exchange` endpoint. Automatically includes the intermediate session token if one is present. ##### Passwords - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/passwords/authenticate.md): Authenticates an email and password credential during the cross-org discovery flow, before an organization is selected. Calls the `POST /sdk/v1/b2b/passwords/discovery/authenticate` endpoint. Returns discovered organizations and an intermediate session token; call [B2BDiscoveryIntermediateSessionsCl… - [Reset Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/passwords/reset-start.md): Sends a password reset email to the specified address for use in the cross-org discovery flow. Calls the `POST /sdk/v1/b2b/passwords/discovery/reset/start` endpoint. Stores a PKCE code challenge for verification when [reset] is called. - [Reset](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/discovery/passwords/reset.md): Completes the password reset in the cross-org discovery flow using the token from the reset email. Calls the `POST /sdk/v1/b2b/passwords/discovery/reset` endpoint. Retrieves the PKCE code verifier stored during the [resetStart] call. #### Members - [Me](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/me.md): Returns the currently authenticated member and their organization. Calls the `GET /sdk/v1/b2b/organizations/members/me` endpoint. Requires an active session. - [Update](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/update.md): Updates profile fields on the currently authenticated member. Calls the `PUT /sdk/v1/b2b/organizations/members/update` endpoint. Requires an active session. - [Search](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/search.md): Searches for members within the organization matching the provided criteria. Calls the `POST /sdk/v1/b2b/organizations/me/members/search` endpoint. Requires an active session and appropriate RBAC permissions. - [Create](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/create.md): Creates a new member in the organization. Calls the `POST /sdk/v1/b2b/organizations/members` endpoint. Requires an active session and appropriate RBAC permissions. - [Delete MFA Phone Number](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/delete-mfa-phone-number.md): Removes the MFA phone number from the currently authenticated member's account. Calls the `DELETE /sdk/v1/b2b/organizations/members/deletePhoneNumber` endpoint. Requires an active session. - [Delete MFATOTP](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/delete-mfatotp.md): Removes the TOTP authenticator registration from the currently authenticated member's account. Calls the `DELETE /sdk/v1/b2b/organizations/members/deleteTOTP` endpoint. Requires an active session. - [Start Email Update](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/start-email-update.md): Initiates an email address update for the currently authenticated member by sending a verification link to the new address. Calls the `POST /sdk/v1/b2b/organizations/members/start_email_update` endpoint. - [Unlink Retired Email](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/unlink-retired-email.md): Removes a retired (previously used) email address from the currently authenticated member's account. Calls the `POST /sdk/v1/b2b/organizations/members/unlink_retired_email` endpoint. ##### Admin - [Update](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/update.md): Updates profile fields on any member in the organization. Calls the `PUT /sdk/v1/b2b/organizations/members/{member_id}` endpoint. Requires an active session and appropriate RBAC permissions. - [Delete](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/delete.md): Permanently deletes the specified member from the organization. Calls the `DELETE /sdk/v1/b2b/organizations/members/{member_id}` endpoint. Requires an active session and appropriate RBAC permissions. This action is irreversible. - [Delete MFA Phone Number](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/delete-mfa-phone-number.md): Removes the MFA phone number from the specified member's account. Calls the `DELETE /sdk/v1/b2b/organizations/members/mfa_phone_numbers/{member_id}` endpoint. Requires an active session and appropriate RBAC permissions. - [Delete MFATOTP](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/delete-mfatotp.md): Removes the TOTP authenticator registration from the specified member's account. Calls the `DELETE /sdk/v1/b2b/organizations/members/totp/{member_id}` endpoint. Requires an active session and appropriate RBAC permissions. - [Delete Password](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/delete-password.md): Deletes the specified password credential from the organization. Calls the `DELETE /sdk/v1/b2b/organizations/members/passwords/{member_password_id}` endpoint. Requires an active session and appropriate RBAC permissions. - [Reactivate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/reactivate.md): Reactivates a previously deleted member in the organization, restoring their access. Calls the `PUT /sdk/v1/b2b/organizations/members/{member_id}/reactivate` endpoint. Requires an active session and appropriate RBAC permissions. - [Start Email Update](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/start-email-update.md): Initiates an email address update for the specified member by sending a verification link to the new address. Calls the `POST /sdk/v1/b2b/organizations/members/{member_id}/start_email_update` endpoint. Requires an active session and appropriate RBAC permissions. - [Unlink Retired Email](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/members/admin/unlink-retired-email.md): Removes a retired (previously used) email address from the specified member's account. Calls the `POST /sdk/v1/b2b/organizations/members/{member_id}/unlink_retired_email` endpoint. Requires an active session and appropriate RBAC permissions. #### Organizations - [Get](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/organizations/get.md): Fetches the current member's organization and its settings. Calls the `GET /sdk/v1/b2b/organizations/me` endpoint. Requires an active session. - [Update](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/organizations/update.md): Updates settings on the current member's organization. Calls the `PUT /sdk/v1/b2b/organizations/me` endpoint. Requires an active session and appropriate RBAC permissions. - [Delete](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/organizations/delete.md): Permanently deletes the current member's organization and all associated data. Calls the `DELETE /sdk/v1/b2b/organizations/me` endpoint. Requires an active session and appropriate RBAC permissions. This action is irreversible. #### Recovery Codes - [Get](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/recovery-codes/get.md): Retrieves the recovery codes for the current member's account. Calls the `GET /sdk/v1/b2b/recovery_codes` endpoint. Requires an active session. - [Recover](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/recovery-codes/recover.md): Authenticates the member using a recovery code as an MFA fallback, establishing a member session. Calls the `POST /sdk/v1/b2b/recovery_codes/recover` endpoint. Automatically includes the intermediate session token if one is present. Each recovery code can only be used once. - [Rotate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/recovery-codes/rotate.md): Rotates the recovery codes for the current member's account, invalidating the previous set and generating a new set. Calls the `POST /sdk/v1/b2b/recovery_codes/rotate` endpoint. Requires an active session. #### SCIM - [Get Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/get-connection.md): Retrieves the organization's SCIM connection. Calls the `GET /sdk/v1/b2b/scim` endpoint. Requires an active session. - [Get Connection Groups](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/get-connection-groups.md): Retrieves the groups associated with the organization's SCIM connection. Calls the `POST /sdk/v1/b2b/scim/groups` endpoint. Requires an active session. - [Create Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/create-connection.md): Creates a new SCIM connection for the organization. Calls the `POST /sdk/v1/b2b/scim` endpoint. Requires an active session. - [Delete Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/delete-connection.md): Deletes the specified SCIM connection. Calls the `DELETE /sdk/v1/b2b/scim/{connection_id}` endpoint. Requires an active session. - [Update Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/update-connection.md): Updates settings on the specified SCIM connection. Calls the `PUT /sdk/v1/b2b/scim/{connection_id}` endpoint. Requires an active session. - [Rotate Token Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/rotate-token-start.md): Initiates a SCIM bearer token rotation for the specified connection. The new token is generated in a pending state; call [rotateTokenComplete] to activate it. Calls the `POST /sdk/v1/b2b/scim/rotate/start` endpoint. Requires an active session. - [Rotate Token Complete](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/rotate-token-complete.md): Completes a SCIM bearer token rotation, activating the new token and invalidating the old one. Must be called after [rotateTokenStart]. Calls the `POST /sdk/v1/b2b/scim/rotate/complete` endpoint. Requires an active session. - [Rotate Token Cancel](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/scim/rotate-token-cancel.md): Cancels an in-progress SCIM bearer token rotation, keeping the existing token active. Calls the `POST /sdk/v1/b2b/scim/rotate/cancel` endpoint. Requires an active session. #### OAuth - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/authenticate.md): Authenticates an OAuth token received via deeplink after a browser-based OAuth flow completes, establishing a member session. Calls the `POST /sdk/v1/b2b/oauth/authenticate` endpoint. Retrieves the PKCE code verifier stored during the [B2BOAuthProviderClient.start] call, and automatically includes t… ##### Google - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/google/start.md): Initiates an OAuth browser flow for the provider, scoped to the specified organization. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/oauth/authenticate`, establishing a member session on… ###### Discovery - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/google/discovery/start.md): Initiates a discovery OAuth browser flow for the provider, allowing the user to enumerate organizations before authenticating. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/discovery/start`, then automatically calls `POST /sdk/v1/b2b/oauth/discovery/authenticate`, returnin… ##### Microsoft - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/microsoft/start.md): Initiates an OAuth browser flow for the provider, scoped to the specified organization. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/oauth/authenticate`, establishing a member session on… ###### Discovery - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/microsoft/discovery/start.md): Initiates a discovery OAuth browser flow for the provider, allowing the user to enumerate organizations before authenticating. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/discovery/start`, then automatically calls `POST /sdk/v1/b2b/oauth/discovery/authenticate`, returnin… ##### Hubspot - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/hubspot/start.md): Initiates an OAuth browser flow for the provider, scoped to the specified organization. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/oauth/authenticate`, establishing a member session on… ###### Discovery - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/hubspot/discovery/start.md): Initiates a discovery OAuth browser flow for the provider, allowing the user to enumerate organizations before authenticating. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/discovery/start`, then automatically calls `POST /sdk/v1/b2b/oauth/discovery/authenticate`, returnin… ##### Slack - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/slack/start.md): Initiates an OAuth browser flow for the provider, scoped to the specified organization. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/oauth/authenticate`, establishing a member session on… ###### Discovery - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/slack/discovery/start.md): Initiates a discovery OAuth browser flow for the provider, allowing the user to enumerate organizations before authenticating. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/discovery/start`, then automatically calls `POST /sdk/v1/b2b/oauth/discovery/authenticate`, returnin… ##### Github - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/github/start.md): Initiates an OAuth browser flow for the provider, scoped to the specified organization. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/oauth/authenticate`, establishing a member session on… ###### Discovery - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/github/discovery/start.md): Initiates a discovery OAuth browser flow for the provider, allowing the user to enumerate organizations before authenticating. Opens a browser session at `https://{domain}/b2b/public/oauth/{provider}/discovery/start`, then automatically calls `POST /sdk/v1/b2b/oauth/discovery/authenticate`, returnin… ##### Discovery - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/oauth/discovery/authenticate.md): Authenticates a discovery OAuth token received via deeplink after a browser-based discovery OAuth flow completes. Calls the `POST /sdk/v1/b2b/oauth/discovery/authenticate` endpoint. Retrieves the PKCE code verifier stored during the [B2BOAuthProviderDiscoveryClient.start] call. Returns discovered or… #### SSO - [Start](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/start.md): Initiates an SSO authentication flow by opening a browser to the SSO provider. Opens a browser session at `https://{domain}/b2b/public/sso/start`, then automatically exchanges the resulting token by calling `POST /sdk/v1/b2b/sso/authenticate`, establishing a member session on success. - [Authenticate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/authenticate.md): Authenticates an SSO token received via deeplink after the browser-based SSO flow completes, establishing a member session. Calls the `POST /sdk/v1/b2b/sso/authenticate` endpoint. Retrieves the PKCE code verifier stored during the [start] call, and automatically includes the intermediate session tok… - [Get Connections](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/get-connections.md): Returns all SSO connections (SAML, OIDC, and external) configured for the organization. Calls the `GET /sdk/v1/b2b/sso` endpoint. Requires an active session. - [Delete Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/delete-connection.md): Deletes the specified SSO connection from the organization. Calls the `DELETE /sdk/v1/b2b/sso/{connection_id}` endpoint. Requires an active session. ##### Saml - [Create Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/saml/create-connection.md): Creates a new SAML SSO connection for the organization. Calls the `POST /sdk/v1/b2b/sso/saml` endpoint. Requires an active session. - [Update Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/saml/update-connection.md): Updates an existing SAML SSO connection. Calls the `PUT /sdk/v1/b2b/sso/saml/{connection_id}` endpoint. Requires an active session. - [Update Connection By Url](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/saml/update-connection-by-url.md): Updates a SAML SSO connection by fetching its metadata directly from the provided URL. Calls the `PUT /sdk/v1/b2b/sso/saml/{connection_id}/url` endpoint. Requires an active session. - [Delete Verification Certificate](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/saml/delete-verification-certificate.md): Deletes a verification certificate from the specified SAML SSO connection. Calls the `DELETE /sdk/v1/b2b/sso/saml/{connection_id}/verification_certificates/{certificate_id}` endpoint. Requires an active session. ##### Oidc - [Create Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/oidc/create-connection.md): Creates a new OIDC SSO connection for the organization. Calls the `POST /sdk/v1/b2b/sso/oidc` endpoint. Requires an active session. - [Update Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/oidc/update-connection.md): Updates an existing OIDC SSO connection. Calls the `PUT /sdk/v1/b2b/sso/oidc/{connection_id}` endpoint. Requires an active session. ##### External - [Create Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/external/create-connection.md): Creates a new external SSO connection for the organization. Calls the `POST /sdk/v1/b2b/sso/external` endpoint. Requires an active session. - [Update Connection](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/sso/external/update-connection.md): Updates an existing external SSO connection. Calls the `PUT /sdk/v1/b2b/sso/external/{connection_id}` endpoint. Requires an active session. #### RBAC - [Is Authorized Sync](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/rbac/is-authorized-sync.md): Checks whether the logged-in member is authorized to perform [action] on [resourceId] using the locally cached RBAC policy. No network request is made; returns `false` if no policy is cached yet. - [Is Authorized](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/rbac/is-authorized.md): Refreshes the RBAC policy from the server, then checks whether the logged-in member is authorized to perform [action] on [resourceId]. - [All Permissions](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/rbac/all-permissions.md): Refreshes the RBAC policy from the server, then returns a map of all permissions for the logged-in member in the form `Map>`. #### Device Fingerprinting - [Get Telemetry Id](https://stytch.com/docs/api-reference/b2b/mobile-sdks/ios/methods/device-fingerprinting/get-telemetry-id.md): Fetches a DFP telemetry ID from the local device fingerprinting provider. The ID is passed to your backend for use in Stytch lookup calls.