identity
Authenticate
Authenticates a user according to a configurable rule: single-factor (one method) or multi-factor (several combined methods). Available methods: login / password, SMS OTP, and silent mobile-network verification (operator silent auth). SIFIP orchestrates the factors and returns an authentication decision with the reached assurance level.
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| user_id | string | required | Identifiant de l'utilisateur à authentifier |
| mode | enum | required | single_factor | multi_factor |
| methods | string[] | required | password | sms_otp | mobile_network |
| credentials.password | string | optional | Requis si la méthode password est utilisée |
| msisdn | E.164 | optional | Requis pour sms_otp et mobile_network |
| otp | string | optional | Code reçu par SMS (étape de vérification) |
| callback_url | URL | optional | Webhook de fin de session |
Sample response
{
"session_id": "auth_9f2c1a7b",
"decision": "AUTHENTICATED",
"mode": "multi_factor",
"assurance_level": "aal2",
"user_id": "user-12345",
"factors": [
{
"method": "password",
"status": "passed"
},
{
"method": "sms_otp",
"status": "passed"
},
{
"method": "mobile_network",
"status": "passed",
"detail": "Ligne active, non SIM-swappée"
}
]
}