The POST /{{envID}}/flowExecutions/{{flowExecutionID}} operation validates the assertion received by the selected FIDO2 device. This operation uses the application/vnd.pingidentity.assertion.check+json custom media type as the content type in the request header, and it requires values for the assertion and origin properties in the request body.

For information about the MFA challenge flow definition step type, see MFA Challenge.