---
title: "POST /v1/accounts/{accountId}/resources/{resourceId}/transactions"
method: POST
path: "/v1/accounts/{accountId}/resources/{resourceId}/transactions"
---

# POST /v1/accounts/{accountId}/resources/{resourceId}/transactions

`POST /v1/accounts/{accountId}/resources/{resourceId}/transactions`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/authpoint/authentication`
- URL: `https://api.usa.cloud.watchguard.com/rest/authpoint/authentication/v1/accounts/{accountId}/resources/{resourceId}/transactions`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/authpoint-authentication-api/docs/v1/accounts/:accountId/resources/:resourceId/transactions/post.ts> (a function with typed inputs; its response is checked against the schema)

Request a QR code be generated or a push notification be sent to the user.

## Path parameters

- `accountId` string, required
- `resourceId` number, required

## Request body

- TransactionRequest: The body to request a QR code or a push transaction
  - `login` string, required: Identifies the user to validate. This must be the email address or the user name of the user to validate.
  - `password` string: The password of the user to be validated. It must be filled in clear text.
  - `originIpAddress` string: The end user IP address. The IP address must be in IPv4 format.
  - `type` 'PUSH' | 'QRCODE', required: The type of MFA transaction to generate. The type can be PUSH or QRCODE.
  - `clientInfoRequest` ClientInfoRequest, required: The client information from a transaction request.
    - `machineName` string: The name of the device that the end user authenticates from.
    - `osVersion` string: The operating system of the device that the end user authenticates from.
    - `domain` string: The domain of the device that the end user authenticates from.

## Response `200`

Transaction created

- TransactionResponse: The transaction response
  - `transactionId` string: The unique transaction identification
  - `command` string: The QRCode command

## Other responses

- `400`: Bad request
- `403`: Unauthorized request
- `404`: Resource or user not found

---

[API](https://skmtc.dev/watchguard/apis/authpoint-authentication-api.md) - [All operations](https://skmtc.dev/watchguard/apis/authpoint-authentication-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/authpoint-authentication-api/revisions/d0a6623e53ce?raw)