Authentication screens

On environments that enforce API version 2026_04_01 (all new environments), step-up authentication is required for headless integrations, and device registration is required when enabled for the environment. Without these, users will be blocked during login or sensitive actions. See the 2026_04_01 upgrade guide.

Implement the screens below based on which authentication methods you’ve enabled in your dashboard. Email is enabled by default for most projects.

Screens

Authentication method	Description	Guide
Email	Collect email, send OTP, verify code	Guide
SMS	Collect phone number, send OTP, verify code	Guide
Social	Trigger OAuth redirect per provider	Guide
External JWT	Sign in with an externally issued JWT (enterprise)	Guide
Passkey	Authenticate with a registered passkey	Guide
External Wallets	Connect and verify an external wallet	Guide
MFA	Prompt for TOTP code or passkey	Guide
Captcha	Render and submit captcha challenge	Guide
Step-up authentication	Re-verify identity before sensitive actions	Guide
Device registration	Verify identity on unrecognized device login	Guide