Sign in
Strong Customer Authentication

Complete an SCA login

Finalize an SCA login by submitting the proof for the started factor (code for SMS_OTP / TOTP, or passkeyAssertion + origin for PASSKEY), echoing the challengeId for SMS_OTP. Returns the reported session status.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

In sandbox, the SMS/TOTP code is always 123456.

post/sca/login/complete

Request body

OR

Example request

{
  "code": "123456",
  "origin": "https://app.example.com"
}

Response

SCA login completed; the session status is returned.

statusstring required

The status of the login session, passed through verbatim (Grid does not normalize it). A successful login reports SUCCESS; other values indicate the login did not complete and should be surfaced to the caller.

Example response

{
  "status": "SUCCESS"
}

Changes