authentication array specifies which authentication methods are required for the recipient to access the ceremony.
You can configure multiple authentication methods that the recipient must complete in sequence. For example, you might require both custom authentication and email code verification.
Learn more about available authentication methods and how to configure them in the Recipient Authentication section.
short and standard. The default is standard.Use short when you need to share the URL in space-constrained channels such as SMS or push notifications.https://app.example.com, but can also use wildcards, like https://*.example.com. For all available options, refer to the frame‑ancestors documentation.Defaults to an empty list ([]), meaning the ceremony cannot be embedded unless you explicitly allow at least one origin. To allow embedding in all origins (not recommended for production), use ["*"].201 Created status code along with a ceremony object after successful creation, or an error otherwise.