diff --git a/internal/client-go/api_frontend.go b/internal/client-go/api_frontend.go
index 94c0d05a6dba..4e27c89f1f12 100644
--- a/internal/client-go/api_frontend.go
+++ b/internal/client-go/api_frontend.go
@@ -942,6 +942,7 @@ type FrontendApiApiCreateBrowserLoginFlowRequest struct {
 	cookie         *string
 	loginChallenge *string
 	organization   *string
+	via            *string
 }
 
 func (r FrontendApiApiCreateBrowserLoginFlowRequest) Refresh(refresh bool) FrontendApiApiCreateBrowserLoginFlowRequest {
@@ -968,6 +969,10 @@ func (r FrontendApiApiCreateBrowserLoginFlowRequest) Organization(organization s
 	r.organization = &organization
 	return r
 }
+func (r FrontendApiApiCreateBrowserLoginFlowRequest) Via(via string) FrontendApiApiCreateBrowserLoginFlowRequest {
+	r.via = &via
+	return r
+}
 
 func (r FrontendApiApiCreateBrowserLoginFlowRequest) Execute() (*LoginFlow, *http.Response, error) {
 	return r.ApiService.CreateBrowserLoginFlowExecute(r)
@@ -1049,6 +1054,9 @@ func (a *FrontendApiService) CreateBrowserLoginFlowExecute(r FrontendApiApiCreat
 	if r.organization != nil {
 		localVarQueryParams.Add("organization", parameterToString(*r.organization, ""))
 	}
+	if r.via != nil {
+		localVarQueryParams.Add("via", parameterToString(*r.via, ""))
+	}
 	// to determine the Content-Type header
 	localVarHTTPContentTypes := []string{}
 
diff --git a/internal/httpclient/api_frontend.go b/internal/httpclient/api_frontend.go
index 94c0d05a6dba..4e27c89f1f12 100644
--- a/internal/httpclient/api_frontend.go
+++ b/internal/httpclient/api_frontend.go
@@ -942,6 +942,7 @@ type FrontendApiApiCreateBrowserLoginFlowRequest struct {
 	cookie         *string
 	loginChallenge *string
 	organization   *string
+	via            *string
 }
 
 func (r FrontendApiApiCreateBrowserLoginFlowRequest) Refresh(refresh bool) FrontendApiApiCreateBrowserLoginFlowRequest {
@@ -968,6 +969,10 @@ func (r FrontendApiApiCreateBrowserLoginFlowRequest) Organization(organization s
 	r.organization = &organization
 	return r
 }
+func (r FrontendApiApiCreateBrowserLoginFlowRequest) Via(via string) FrontendApiApiCreateBrowserLoginFlowRequest {
+	r.via = &via
+	return r
+}
 
 func (r FrontendApiApiCreateBrowserLoginFlowRequest) Execute() (*LoginFlow, *http.Response, error) {
 	return r.ApiService.CreateBrowserLoginFlowExecute(r)
@@ -1049,6 +1054,9 @@ func (a *FrontendApiService) CreateBrowserLoginFlowExecute(r FrontendApiApiCreat
 	if r.organization != nil {
 		localVarQueryParams.Add("organization", parameterToString(*r.organization, ""))
 	}
+	if r.via != nil {
+		localVarQueryParams.Add("via", parameterToString(*r.via, ""))
+	}
 	// to determine the Content-Type header
 	localVarHTTPContentTypes := []string{}
 
diff --git a/selfservice/flow/login/handler.go b/selfservice/flow/login/handler.go
index ab7fe85245e2..b90218ef4fdd 100644
--- a/selfservice/flow/login/handler.go
+++ b/selfservice/flow/login/handler.go
@@ -400,6 +400,11 @@ type createBrowserLoginFlow struct {
 	// required: false
 	// in: query
 	Organization string `json:"organization"`
+
+	// Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.
+	//
+	// in: query
+	Via string `json:"via"`
 }
 
 // swagger:route GET /self-service/login/browser frontend createBrowserLoginFlow
diff --git a/spec/api.json b/spec/api.json
index 428393cf6eb8..17c3e89f193d 100644
--- a/spec/api.json
+++ b/spec/api.json
@@ -5319,6 +5319,14 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "description": "Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.",
+            "in": "query",
+            "name": "via",
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
diff --git a/spec/swagger.json b/spec/swagger.json
index a3e4d454bad1..4d97d50bb9b7 100755
--- a/spec/swagger.json
+++ b/spec/swagger.json
@@ -1669,6 +1669,12 @@
             "description": "An optional organization ID that should be used for logging this user in.\nThis parameter is only effective in the Ory Network.",
             "name": "organization",
             "in": "query"
+          },
+          {
+            "type": "string",
+            "description": "Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.",
+            "name": "via",
+            "in": "query"
           }
         ],
         "responses": {