Initiates direct authentication with an out-of-band authenticator
Note: The
/oob-authenticateendpoint requires client authentication. The method is configured per client app. See Client authentication methods.
Note: This endpoint is deprecated. Use /primary-authenticate instead.
The type of challenge to prompt for in a /primary-authenticate request
The out-of-band channel for use with authentication. Required for all /primary-authenticate and /challenge requests with an out-of-band authenticator.
- Initiate out-of-band primary authentication Okta Verify
- Initiate out-of-band primary authentication with SMS
- Initiate out-of-band primary authentication with Voice
curl -i -X POST \
https://okta-subdomain.pixtulate.com/oauth2/v1/oob-authenticate \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d login_hint=testuser@example.com \
-d channel_hint=push \
-d challenge_hint=urn:okta:params:oauth:grant-type:oobOut-of-band authentication has successfully been initiated.
The end-user verification code used to bind the authorization operation on the secondary channel with the primary channel. Present only if binding_method=transfer.
The method used to bind the out-of-band channel with the primary channel.
The out-of-band channel for use with authentication. Required for all /primary-authenticate and /challenge requests with an out-of-band authenticator.
The minimum amount of time in seconds that the client should wait between polling requests to the token endpoint
- Initiate out-of-band primary authentication response with Okta Verify
- Initiate out-of-band primary authentication response with Okta Verify number matching challenge
- Initiate out-of-band primary authentication response with SMS
- Initiate out-of-band primary authentication response with Voice
{ "oob_code": "ftOpMH6ohWMGWoH1vgrX-lNX6tnXE6JNd9", "channel": "push", "binding_method": "none", "expires_in": 300, "interval": 5 }