Update user MFA

Request

Updates the Multi-Factor Authentication (MFA) information of a user.

The generated link with an enrollment rel link must be followed to verify the existing MFA or enroll new MFA.

Security
SecretApiKey or JWT
curl -i -X POST \
  https://www.rebilly.com/_mock/catalog/all/profile/mfa \
  -H 'REB-APIKEY: YOUR_API_KEY_HERE'

Responses

User MFA update URL created.

Headers
Locationstring, (uri)

Location of the related resource.

Example:"https://api.rebilly.com/example"
X-RateLimit-Limitinteger

Total number of rate limit tokens for this request within a rate limit period. For more information, see Rate limits.

Example:3600
X-RateLimit-Remaininginteger

Remaining number of rate limit tokens for this request within the rate limit period. For example, in the sandbox environment, rate limits for non-GET endpoints are set at 3000 requests per 10 minutes.

Example:3600
Bodyapplication/json
statusstring

Status of Multi-Factor Authentication (MFA) enrollment.

Enum:"active""inactive"
typestring or null

Type of MFA enrollment. Type duo cannot be updated or deleted. If you need to reset your Duo MFA, Contact support.

Enum:"duo""otp"null
lastAuthTimestring or null, (date-time)read-only

Date and time when MFA verification is most recently passed. To disable MFA, no more than 10 minutes must elapse between this value and the request to disable MFA.

Response
{ "status": "active", "type": "duo", "lastAuthTime": "2019-08-24T14:15:22Z", "_links": [ {} ] }