added
New v3 API endpoints for MFA
July 22nd, 2024
We have introduced a set of Multi-Factor Authentication (MFA) API endpoints. There are two stages in the BILL MFA process.
-
MFA setup: Add a valid phone number for setting up MFA in the organization (with
POST /v3/mfa/setup
), and then complete the setup by validating the entered phone number (withPOST /v3/mfa/validate
). At this point, the phone number is registered for the MFA sign in operation. -
MFA sign in: Generate an MFA challenge (with
POST /v3/mfa/challenge
), and then complete MFA sign in by validating the MFA challenge (withPOST /v3/mfa/challenge/validate
). At this point, your API session is MFA trusted.
Operation | API endpoint |
---|---|
Add phone for MFA setup | POST /v3/mfa/setup |
Validate phone for MFA setup | POST /v3/mfa/validate |
Generate MFA challenge | POST /v3/mfa/challenge |
Validate MFA challenge | POST /v3/mfa/challenge/validate |