Overview
The Authenticate endpoint provides comprehensive risk assessment by combining session signals with account-specific intelligence. This makes it the most powerful option for protecting user accounts, sensitive actions, and high-value transactions.When to Use Authenticate
Use the Authenticate endpoint when a session is associated with a user account. This is ideal for:- User login flows - Verify risk before completing authentication
- Account creation - Assess risk before finalizing new account registration
- High-value transactions - Validate sessions before processing payments, withdrawals, redemptions, etc.
- Account modifications - Check risk before allowing password changes or profile updates
- Sensitive data access - Verify session legitimacy before granting access to protected information
Required Parameters
Account Object
The account object is a JSON object that contains the following fields:Example Request
Lists will be automatically created if they don’t exist. Use good naming conventions: lowercase with dashes or underscores, avoiding special characters or whitespace (e.g.,
high-risk-users, beta_testers).Benefits of Authenticate
- Comprehensive account assessment - Get risk scores for both the current session and the account overall
- Account intelligence - Leverage email and phone reputation data
- List integration - Automatically apply your allow/block lists to decisions
- Historical context - Build risk profiles across multiple sessions for the same account
Next Steps
- Authenticate Reference
- Explore Lists for managing allow and block lists
- See the Example Apps for a complete implementation