Manual
CLI
API
Log in Get started free

Reset two-factor authentication of a member

Turns off two-factor authentication for a member who lost their authenticator app and recovery codes.

Turns off two-factor authentication for a member who lost their authenticator app and recovery codes.

HTTP
DELETE /org/members/{userId}/mfa

Access: Session token only. API keys get 403 with insufficient_scope.

Role: Organisation owner or admin.

They sign in with their password and, if the organisation requires it, set it up again.

Path parameters #

ParameterDescription
userIdThe id of the member.

Response 204 #

It is reset. There is no body. The audit log gets an org.member_mfa_reset entry.

Errors #

StatuserrorWhen
401unauthenticatedThe token is missing or not valid.
403forbiddenYou are not an owner or admin, or the member is the owner and not you.
404not_foundThe user is not a member.
429rate_limitedToo many requests, see Rate limiting.

See Errors for the error format.