The POST /{{envID}}/flowExecutions/{{flowExecutionID}} operation verifies the OTP for offline device types. This operation requires an OTP value in the request body. The operation uses the application/vnd.pingidentity.otp.check+json custom media type as the content type in the request header.

For information about the MFA challenge flow definition step type, see MFA Challenge.