Skip to main content

Begin invitation-backed passkey admission

POST 

/api/v1/auth/passkeys/registration/admission/start

Requires same-origin JSON. The invitation is validated without being consumed, then only its digest, the prospective member fields, and the one-use five-minute ceremony state are retained server-side.

Request​

Responses​

One-use WebAuthn creation options

Response Headers
    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.