POST to the challenge_endpoint of the authorization server, to get an attestation challenge.
challenge_endpoint