Validate User - BlinkOps Documentation

Validate a user’s risk and send an MFA token via Email or SMS when the risk is above an acceptable threshold. This action takes care of registering new users as well as validating returning users. Required Scope: Manage All.

External DocumentationTo learn more, visit the OneLogin documentation.

Basic Parameters

Parameter	Description
Context Device Fingerprint	The unique device fingerprint for the user web browser.
Context Device ID	The mobile device ID or other type of unique identifier for a device.
Context IP	The IP address of the user. Example:`"120.118.218.227"`
Context Session ID	The persistent session ID for the for the user.
Context User Agent	The user agent of the browser. Example: `"user_agent": "Mozilla/5.0 (Windows; U; Windows NT 6.0)"`
Email	The email for sending the MFA token. Required for email-based MFA.
Phone	The phone number for sending the MFA token via SMS. Required for SMS-based MFA. Must be in E.164 format (e.g., `+15555555555`).
User Identifier	A unique identifier for the user (unique ID, email address, or username).

Advanced Parameters

Parameter	Description
Expires In	The window of time in seconds that the token must be verified within. Defaults to `480` seconds (8 minutes). Maximum is `900` seconds (15 minutes).
First Name	The first name of the user.
Last Name	The last name of the user.
Risk Threshold	The risk score level that will trigger an MFA token to be sent. Note: If risk is greater than or equal to this value, an MFA token will be sent. Defaults to `50`.

Example Output

{
	"user_id": 60254824,
	"risk": {
		"score": 93,
		"reasons": [
			"Chrome on Windows is used infrequently",
			"New location detected",
			"Accessed from a new IP address"
		]
	},
	"mfa": {
		"otp_sent": true,
		"state_token": "67ff7e91-ec38-467d-b7df-c0f4f61efd73"
	}
}