# Retrieve a list of all Challenges for a Factor. **GET /v2/Services/{ServiceSid}/Entities/{Identity}/Challenges** Retrieve a list of all Challenges for a Factor. ## Servers - https://verify.twilio.com: https://verify.twilio.com () ## Authentication methods - Account sid auth token ## Parameters ### Path parameters - **ServiceSid** (string) The unique SID identifier of the Service. - **Identity** (string) Customer unique identity for the Entity owner of the Challenge. This identifier should be immutable, not PII, length between 8 and 64 characters, and generated by your external system, such as your user's UUID, GUID, or SID. It can only contain dash (-) separated alphanumeric characters. ### Query parameters - **FactorSid** (string) The unique SID identifier of the Factor. - **Status** (string) The Status of the Challenges to fetch. One of `pending`, `expired`, `approved` or `denied`. - **Order** (string) The desired sort order of the Challenges list. One of `asc` or `desc` for ascending and descending respectively. Defaults to `asc`. - **PageSize** (integer(int64)) How many resources to return in each list page. The default is 50, and the maximum is 1000. - **Page** (integer) The page index. This value is simply for client state. - **PageToken** (string) The page token. This is provided by the API. ## Responses ### 200 OK #### Headers - **Access-Control-Allow-Origin** (string) Specify the origin(s) allowed to access the resource - **Access-Control-Allow-Methods** (string) Specify the HTTP methods allowed when accessing the resource - **Access-Control-Allow-Headers** (string) Specify the headers allowed when accessing the resource - **Access-Control-Allow-Credentials** (boolean) Indicates whether the browser should include credentials - **Access-Control-Expose-Headers** (string) Headers exposed to the client #### Body: application/json (object) - **challenges** (array[object]) - **meta** (object) [Powered by Bump.sh](https://bump.sh)