Opt-in-mfa (Section)#

Path: /profiles/profile{id, type}/settings/authentication-service/authentication-actions/authentication-action{id}/opt-in-mfa

Parameters#

NameTypeRequiredDefaultDescription
disable-recovery-codesbooleanoptionalfalseDisable use of recovery codes
allow-authentication-with-recovery-codebooleanoptionalfalseAllow using recovery codes to complete authentication
allow-authentication-with-sso-for-second-factorbooleanoptionalfalseAllow using an SSO to complete second factor authentication
opt-out-ttl-in-daysuint32optional0TTL of the second factor opt-out, in days. If zero (the default), then second factor opt-out is not allowed

Subsections#

NameTypeDescription
account-manager SectionNone
mfa-state-bucket SectionBucket to store MfA state in. Required for LDAP account managers.
allowed-second-factor ListList with the allowed second factors

Was this helpful?