B2B Saas Authentication

/

API reference

/

Multi-Factor Authentication (MFA)

/

Time-based one-time passcodes

/

Authenticate TOTP

Authenticate TOTP

POSThttps://test.stytch.com/v1/b2b/totp/authenticate

Authenticate a Member provided TOTP.


Body parameters


organization_id*string

member_id*string

code*string

intermediate_session_tokenstring

set_mfa_enrollmentstring

set_default_mfaboolean

session_tokenstring

session_jwtstring

session_duration_minutesint

session_custom_claimsmap<string, any>

Response fields


request_idstring

status_codeint

member_idstring

organization_idstring

memberobject

organizationobject

session_tokenstring

session_jwtstring

member_sessionobject
curl --request POST \
  --url https://test.stytch.com/v1/b2b/totp/authenticate \
  -u 'PROJECT_ID:SECRET' \
  -H 'Content-Type: application/json' \
  -d '{
    "organization_id": "organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931",
    "member_id": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f",
    "code": "123456",
    "intermediate_session_token": "SeiGwdj5lKkrEVgcEY3QNJXt6srxS3IK2Nwkar6mXD4="
  }'

RESPONSE

200
{
  "status_code": 200,
  "request_id": "request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141",
  "member_id": "member-test-32fc5024-9c09-4da3-bd2e-c9ce4da9375f",
  "organization_id": "organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931",
  "session_jwt": "example_jwt",
  "session_token": "mZAYn5aLEqKUlZ_Ad9U_fWr38GaAQ1oFAhT8ds245v7Q",
  "member_session": {...},
  "member": {...},
  "organization": {...}
}

Common Error Types