---
title: "POST /auth-mfa"
method: POST
path: "/auth-mfa"
tags: ["auth"]
---

# POST /auth-mfa

`POST /auth-mfa`

## Request

- Base URL: `https://headless.dataddo.com/customer-api/v1`
- URL: `https://headless.dataddo.com/customer-api/v1/auth-mfa`
- Auth: none required

Completes login by verifying the second-factor MFA code

## Request body

- PostAuthMfaInput
  - `session` string
  - `email` string
  - `code` string

## Response `200`

- AuthResource
  - `access_token` string
  - `refresh_token` string: Dataddo refresh JWT with token type rt+jwt.
  - `provider` 'cognito' | 'google' | 'okta' | 'active_directory_public' | 'entra_id_saml' | 'keycloak' | 'one_login_saml' | 'okta_saml'
  - `realm_id` integer
  - `expires_in` integer

---

[API](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api.md) · [All operations](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api/revisions/dcfa2345bd10?raw)