Challenges

A challenge is a one-time, time-limited secret that authorizes a single enrollment, without the enrolling client holding any Horizon credentials.

A WebRA challenge is issued by submitting an enroll request on a WebRA profile whose authorization mode is challenge, through the requests API. The challenge is returned once, on the approved request, and is then consumed on this API.