---
title: "Service: /authenticators/{authenticator}/challenge [POST]"
source: https://dev.pageseeder.com/api/services/authenticator-challenge-POST.html
last_updated: 2026-08-07T17:09:54+10:00
document_type: api_endpoint
operation_id: member-POST
resource_id: member
path_template: /authenticators/{authenticator}/challenge
http_method: POST
api_category: member
implementation_version: null
api_since: 6.2000
deprecated_since: null
obsolete_since: null
api_support: experimental
cache_control: N/A
generated_at: 2026-08-07
tokens: ~244
---

# /authenticators/\{authenticator\}/challenge \[POST\]

## Description

To verify an authenticator, this generator creates a multifactor authentication (MFA) challenge for the authenticator with the specified `public-id` registered for the signed-in member.

If an unresolved challenge has been created less than a minute ago for that authenticator, that challenge is returned instead of creating a new one.

## Parameters

No parameters required.

## Permission

Only the member themselves can invoke this service.

## Response

```lang-xml
 <challenge-request successful="[true|false]" message="[message]">
    <challenge id="[challenge id]"
          purpose="[registration|authentication]"
    authenticator="[authenticator public id]"
           issued="[issue datetime]"
          expires="[expiry datetime]"
       [<data>[challenge specific data]</data>]
    </challenge>
 </challenge-request>
 
```

## Error handling

No specific errors expected for this generator.