Create a new challenge for authentication, MFA, step-up verification, or custom flows.
Purposes:
authenticate - Primary login verification (returns session tokens on success)mfa - Second factor after primary auth (returns session tokens on success)step_up - Re-verify identity for sensitive actionsverify_contact - Verify email/phone ownershipverify_identity - KYC/identity verificationchange_identifier - Verify new email/phone before updatingcustom - Custom verification with callbackMethods:
email_otp - Send OTP code via emailsms_otp - Send OTP code via SMSmagic_link - Send magic link via emailtotp - Time-based OTP (authenticator app)backup_code - Use backup recovery codewebauthn - Passkey/security key verificationpush - Push notification approval