Login Flow

When To Use It

Use this flow when a user signs in through a portal experience.

Prerequisites

1. Web vs API Chain
2. Portal Model
3. Secure Channel

Call Sequence

1. establish Secure Channel when the login entrypoint requires it
2. initiate login
3. send MFA challenge if the session requires it
4. complete login
5. store JWT and keep using the same X-Client-Hash

Branch Decisions

1. MFA required or not
2. pending approval or fully active
3. default workspace available or workspace selection needed

Common Failures

1. portal mismatch
2. missing X-Client-Hash
3. missing Secure Channel context
4. using API-key assumptions on a WEB flow

Reference Entry