/api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}
When roleType Get subscriptions of a Role with a specific notification type. Else when roleId Get subscription of a Custom Role with a specific notification type.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| roleTypeOrRoleId | path | required | string | — |
| notificationType | path | required | string | — |
Success
Not Found
GET /api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}
/api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}/subscribe
When roleType Subscribes a Role to a specific notification type. When you change the subscription status of a Role, it overrides the subscription of any individual user of that Role. Else when roleId Subscribes a Custom Role to a specific notification type. When you change the subscription status of a Custom Role, it overrides the subscription of any individual user of that Custom Role.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| roleTypeOrRoleId | path | required | string | — |
| notificationType | path | required | string | — |
Success
Not Found
POST /api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}/subscribe
/api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}/unsubscribe
When roleType Unsubscribes a Role from a specific notification type. When you change the subscription status of a Role, it overrides the subscription of any individual user of that Role. Else when roleId Unsubscribes a Custom Role from a specific notification type. When you change the subscription status of a Custom Role, it overrides the subscription of any individual user of that Custom Role.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| roleTypeOrRoleId | path | required | string | — |
| notificationType | path | required | string | — |
Success
Not Found
POST /api/v1/roles/{roleTypeOrRoleId}/subscriptions/{notificationType}/unsubscribe
/api/v1/users/{userId}/subscriptions/{notificationType}/subscribe
Subscribes a User to a specific notification type. Only the current User can subscribe to a specific notification type. An AccessDeniedException message is sent if requests are made from other users.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| notificationType | path | required | string | — |
Success
Not Found
POST /api/v1/users/{userId}/subscriptions/{notificationType}/subscribe
/api/v1/users/{userId}/subscriptions/{notificationType}/unsubscribe
Unsubscribes a User from a specific notification type. Only the current User can unsubscribe from a specific notification type. An AccessDeniedException message is sent if requests are made from other users.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| notificationType | path | required | string | — |
Success
Not Found
POST /api/v1/users/{userId}/subscriptions/{notificationType}/unsubscribe
/api/v1/templates/sms
Enumerates custom SMS templates in your organization. A subset of templates can be returned that match a template type.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateType | query | optional | string | — |
Success
GET /api/v1/templates/sms
/api/v1/templates/sms
Adds a new custom SMS template to your organization.
application/json
SmsTemplate
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| created | string | optional |
| template | string | optional |
| lastUpdated | string | optional |
| translations | object | optional |
Success
POST /api/v1/templates/sms
/api/v1/templates/sms/{templateId}
Removes an SMS template.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateId | path | required | string | — |
No Content
DELETE /api/v1/templates/sms/{templateId}
/api/v1/templates/sms/{templateId}
Fetches a specific template by id
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateId | path | required | string | — |
Success
GET /api/v1/templates/sms/{templateId}
/api/v1/templates/sms/{templateId}
Updates only some of the SMS template properties:
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateId | path | required | string | — |
application/json
SmsTemplate
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| created | string | optional |
| template | string | optional |
| lastUpdated | string | optional |
| translations | object | optional |
Success
POST /api/v1/templates/sms/{templateId}
/api/v1/templates/sms/{templateId}
Updates the SMS template.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| templateId | path | required | string | — |
application/json
SmsTemplate
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| type | string | optional |
| created | string | optional |
| template | string | optional |
| lastUpdated | string | optional |
| translations | object | optional |
Success
PUT /api/v1/templates/sms/{templateId}
/api/v1/threats/configuration
Gets current ThreatInsight configuration
Success
GET /api/v1/threats/configuration
/api/v1/threats/configuration
Updates ThreatInsight configuration
application/json
ThreatInsightConfiguration
Success
POST /api/v1/threats/configuration
/api/v1/trustedOrigins
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| q | query | optional | string | — |
| filter | query | optional | string | — |
| after | query | optional | string | — |
| limit | query | optional | integer | — |
Success
GET /api/v1/trustedOrigins
/api/v1/trustedOrigins
Success
application/json
TrustedOrigin
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| origin | string | optional |
| scopes | array | optional |
| └ type | string | optional |
| └ stringValue | string | optional |
| └ allowedOktaApps | array | optional |
| status | string | optional |
| created | string | optional |
| createdBy | string | optional |
| lastUpdated | string | optional |
| lastUpdatedBy | string | optional |
Success
POST /api/v1/trustedOrigins
/api/v1/trustedOrigins/{trustedOriginId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
Success
DELETE /api/v1/trustedOrigins/{trustedOriginId}
/api/v1/trustedOrigins/{trustedOriginId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
Success
GET /api/v1/trustedOrigins/{trustedOriginId}
/api/v1/trustedOrigins/{trustedOriginId}
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
application/json
TrustedOrigin
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| name | string | optional |
| _links | object | optional |
| origin | string | optional |
| scopes | array | optional |
| └ type | string | optional |
| └ stringValue | string | optional |
| └ allowedOktaApps | array | optional |
| status | string | optional |
| created | string | optional |
| createdBy | string | optional |
| lastUpdated | string | optional |
| lastUpdatedBy | string | optional |
Success
PUT /api/v1/trustedOrigins/{trustedOriginId}
/api/v1/trustedOrigins/{trustedOriginId}/lifecycle/activate
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
Success
POST /api/v1/trustedOrigins/{trustedOriginId}/lifecycle/activate
/api/v1/trustedOrigins/{trustedOriginId}/lifecycle/deactivate
Success
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| trustedOriginId | path | required | string | — |
Success
POST /api/v1/trustedOrigins/{trustedOriginId}/lifecycle/deactivate
/api/v1/users
Lists users that do not have a status of ‘DEPROVISIONED’ (by default), up to the maximum (200 for most orgs), with pagination in most cases. A subset of users can be returned that match a supported filter expression or search criteria.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| q | query | optional | string | Finds a user that matches firstName, lastName, and email properties |
| after | query | optional | string | Specifies the pagination cursor for the next page of users |
| limit | query | optional | integer | Specifies the number of results returned |
| filter | query | optional | string | Filters users with a supported expression for a subset of properties |
| search | query | optional | string | Searches for users with a supported filtering expression for most properties |
| sortBy | query | optional | string | — |
| sortOrder | query | optional | string | — |
Success
GET /api/v1/users
/api/v1/users
Creates a new user in your Okta organization with or without credentials.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| activate | query | optional | boolean | Executes activation lifecycle operation when creating the user |
| provider | query | optional | boolean | Indicates whether to create a user with a specified authentication provider |
| nextLogin | query | optional | string | With activate=true, set nextLogin to “changePassword” to have the password be EXPIRED, so user must change it the next time they log in. |
application/json
CreateUserRequest
| Property | Type | Required |
|---|---|---|
| type | object | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ _links | object | optional |
| └ created | string | optional |
| └ default | boolean | optional |
| └ createdBy | string | optional |
| └ description | string | optional |
| └ displayName | string | optional |
| └ lastUpdated | string | optional |
| └ lastUpdatedBy | string | optional |
| profile | object | optional |
| └ city | string | optional |
| string | optional | |
| └ login | string | optional |
| └ state | string | optional |
| └ title | string | optional |
| └ locale | string | optional |
| └ manager | string | optional |
| └ zipCode | string | optional |
| └ division | string | optional |
| └ lastName | string | optional |
| └ nickName | string | optional |
| └ timezone | string | optional |
| └ userType | string | optional |
| └ firstName | string | optional |
| └ managerId | string | optional |
| └ costCenter | string | optional |
| └ department | string | optional |
| └ middleName | string | optional |
| └ profileUrl | string | optional |
| └ countryCode | string | optional |
| └ …11 more | object | optional |
| groupIds | array | optional |
| credentials | object | optional |
| └ password | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ provider | object | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ recovery_question | object | optional |
| └ answer | string | optional |
| └ question | string | optional |
Success
POST /api/v1/users
/api/v1/users/{associatedUserId}/linkedObjects/{primaryRelationshipName}/{primaryUserId}
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| associatedUserId | path | required | string | — |
| primaryRelationshipName | path | required | string | — |
| primaryUserId | path | required | string | — |
Success
PUT /api/v1/users/{associatedUserId}/linkedObjects/{primaryRelationshipName}/{primaryUserId}
/api/v1/users/{userId}
Deletes a user permanently. This operation can only be performed on users that have a DEPROVISIONED status. This action cannot be recovered!
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| sendEmail | query | optional | boolean | — |
ACCEPTED
DELETE /api/v1/users/{userId}
/api/v1/users/{userId}
Fetches a user from your Okta organization.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
GET /api/v1/users/{userId}
/api/v1/users/{userId}
Update a user’s profile or credentials with partial update semantics.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| strict | query | optional | boolean | — |
application/json
User
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| type | object | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ _links | object | optional |
| └ created | string | optional |
| └ default | boolean | optional |
| └ createdBy | string | optional |
| └ description | string | optional |
| └ displayName | string | optional |
| └ lastUpdated | string | optional |
| └ lastUpdatedBy | string | optional |
| _links | object | optional |
| status | string | optional |
| created | string | optional |
| profile | object | optional |
| └ city | string | optional |
| string | optional | |
| └ login | string | optional |
| └ state | string | optional |
| └ title | string | optional |
| └ locale | string | optional |
| └ manager | string | optional |
| └ zipCode | string | optional |
| └ division | string | optional |
| └ lastName | string | optional |
| └ nickName | string | optional |
| └ timezone | string | optional |
| └ userType | string | optional |
| └ firstName | string | optional |
| └ managerId | string | optional |
| └ costCenter | string | optional |
| └ department | string | optional |
| └ middleName | string | optional |
| └ profileUrl | string | optional |
| └ countryCode | string | optional |
| └ …11 more | object | optional |
| _embedded | object | optional |
| activated | string | optional |
| lastLogin | string | optional |
| credentials | object | optional |
| └ password | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ provider | object | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ recovery_question | object | optional |
| └ answer | string | optional |
| └ question | string | optional |
| lastUpdated | string | optional |
| statusChanged | string | optional |
| passwordChanged | string | optional |
| transitioningToStatus | string | optional |
Success
POST /api/v1/users/{userId}
/api/v1/users/{userId}
Update a user’s profile and/or credentials using strict-update semantics.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| strict | query | optional | boolean | — |
application/json
User
| Property | Type | Required |
|---|---|---|
| id | string | optional |
| type | object | optional |
| └ id | string | optional |
| └ name | string | optional |
| └ _links | object | optional |
| └ created | string | optional |
| └ default | boolean | optional |
| └ createdBy | string | optional |
| └ description | string | optional |
| └ displayName | string | optional |
| └ lastUpdated | string | optional |
| └ lastUpdatedBy | string | optional |
| _links | object | optional |
| status | string | optional |
| created | string | optional |
| profile | object | optional |
| └ city | string | optional |
| string | optional | |
| └ login | string | optional |
| └ state | string | optional |
| └ title | string | optional |
| └ locale | string | optional |
| └ manager | string | optional |
| └ zipCode | string | optional |
| └ division | string | optional |
| └ lastName | string | optional |
| └ nickName | string | optional |
| └ timezone | string | optional |
| └ userType | string | optional |
| └ firstName | string | optional |
| └ managerId | string | optional |
| └ costCenter | string | optional |
| └ department | string | optional |
| └ middleName | string | optional |
| └ profileUrl | string | optional |
| └ countryCode | string | optional |
| └ …11 more | object | optional |
| _embedded | object | optional |
| activated | string | optional |
| lastLogin | string | optional |
| credentials | object | optional |
| └ password | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| └ provider | object | optional |
| └ name | string | optional |
| └ type | string | optional |
| └ recovery_question | object | optional |
| └ answer | string | optional |
| └ question | string | optional |
| lastUpdated | string | optional |
| statusChanged | string | optional |
| passwordChanged | string | optional |
| transitioningToStatus | string | optional |
Success
PUT /api/v1/users/{userId}
/api/v1/users/{userId}/appLinks
Fetches appLinks for all direct or indirect (via group membership) assigned applications.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
GET /api/v1/users/{userId}/appLinks
/api/v1/users/{userId}/clients
Lists all client resources for which the specified user has grants or tokens.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
GET /api/v1/users/{userId}/clients
/api/v1/users/{userId}/clients/{clientId}/grants
Revokes all grants for the specified user and client
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
No Content
DELETE /api/v1/users/{userId}/clients/{clientId}/grants
/api/v1/users/{userId}/clients/{clientId}/grants
Lists all grants for a specified user and client
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
| expand | query | optional | string | — |
| after | query | optional | string | — |
| limit | query | optional | integer | — |
Success
GET /api/v1/users/{userId}/clients/{clientId}/grants
/api/v1/users/{userId}/clients/{clientId}/tokens
Revokes all refresh tokens issued for the specified User and Client.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
No Content
DELETE /api/v1/users/{userId}/clients/{clientId}/tokens
/api/v1/users/{userId}/clients/{clientId}/tokens
Lists all refresh tokens issued for the specified User and Client.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
| expand | query | optional | string | — |
| after | query | optional | string | — |
| limit | query | optional | integer | — |
Success
GET /api/v1/users/{userId}/clients/{clientId}/tokens
/api/v1/users/{userId}/clients/{clientId}/tokens/{tokenId}
Revokes the specified refresh token.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
| tokenId | path | required | string | — |
No Content
DELETE /api/v1/users/{userId}/clients/{clientId}/tokens/{tokenId}
/api/v1/users/{userId}/clients/{clientId}/tokens/{tokenId}
Gets a refresh token issued for the specified User and Client.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| clientId | path | required | string | — |
| tokenId | path | required | string | — |
| expand | query | optional | string | — |
| limit | query | optional | integer | — |
| after | query | optional | string | — |
Success
GET /api/v1/users/{userId}/clients/{clientId}/tokens/{tokenId}
/api/v1/users/{userId}/credentials/change_password
Changes a user’s password by validating the user’s current password. This operation can only be performed on users in STAGED, ACTIVE, PASSWORD_EXPIRED, or RECOVERY status that have a valid password credential
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| strict | query | optional | boolean | — |
application/json
ChangePasswordRequest
| Property | Type | Required |
|---|---|---|
| newPassword | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| oldPassword | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
Success
POST /api/v1/users/{userId}/credentials/change_password
/api/v1/users/{userId}/credentials/change_recovery_question
Changes a user’s recovery question & answer credential by validating the user’s current password. This operation can only be performed on users in STAGED, ACTIVE or RECOVERY status that have a valid password credential
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
application/json
UserCredentials
| Property | Type | Required |
|---|---|---|
| password | object | optional |
| └ hash | object | optional |
| └ salt | string | optional |
| └ value | string | optional |
| └ algorithm | string | optional |
| └ saltOrder | string | optional |
| └ workFactor | integer | optional |
| └ hook | object | optional |
| └ type | string | optional |
| └ value | string | optional |
| provider | object | optional |
| └ name | string | optional |
| └ type | string | optional |
| recovery_question | object | optional |
| └ answer | string | optional |
| └ question | string | optional |
Success
POST /api/v1/users/{userId}/credentials/change_recovery_question
/api/v1/users/{userId}/credentials/forgot_password
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
POST /api/v1/users/{userId}/credentials/forgot_password
/api/v1/users/{userId}/grants
Revokes all grants for a specified user
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
No Content
DELETE /api/v1/users/{userId}/grants
/api/v1/users/{userId}/grants
Lists all grants for the specified user
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| scopeId | query | optional | string | — |
| expand | query | optional | string | — |
| after | query | optional | string | — |
| limit | query | optional | integer | — |
Success
GET /api/v1/users/{userId}/grants
/api/v1/users/{userId}/grants/{grantId}
Revokes one grant for a specified user
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| grantId | path | required | string | — |
No Content
DELETE /api/v1/users/{userId}/grants/{grantId}
/api/v1/users/{userId}/grants/{grantId}
Gets a grant for the specified user
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| grantId | path | required | string | — |
| expand | query | optional | string | — |
Success
GET /api/v1/users/{userId}/grants/{grantId}
/api/v1/users/{userId}/groups
Fetches the groups of which the user is a member.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
GET /api/v1/users/{userId}/groups
/api/v1/users/{userId}/idps
Lists the IdPs associated with the user.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
GET /api/v1/users/{userId}/idps
/api/v1/users/{userId}/lifecycle/activate
Activates a user. This operation can only be performed on users with a STAGED status. Activation of a user is an asynchronous operation. The user will have the transitioningToStatus property with a value of ACTIVE during activation to indicate that the user hasn’t completed the asynchronous operation. The user will have a status of ACTIVE when the activation process is complete.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| sendEmail | query | required | boolean | Sends an activation email to the user if true |
Success
POST /api/v1/users/{userId}/lifecycle/activate
/api/v1/users/{userId}/lifecycle/deactivate
Deactivates a user. This operation can only be performed on users that do not have a DEPROVISIONED status. While the asynchronous operation (triggered by HTTP header Prefer: respond-async) is proceeding the user’s transitioningToStatus property is DEPROVISIONED. The user’s status is DEPROVISIONED when the deactivation process is complete.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| sendEmail | query | optional | boolean | — |
OK
POST /api/v1/users/{userId}/lifecycle/deactivate
/api/v1/users/{userId}/lifecycle/expire_password?tempPassword=false
This operation transitions the user to the status of PASSWORD_EXPIRED so that the user is required to change their password at their next login.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
POST /api/v1/users/{userId}/lifecycle/expire_password?tempPassword=false
/api/v1/users/{userId}/lifecycle/expire_password?tempPassword=true
This operation transitions the user to the status of PASSWORD_EXPIRED and the user’s password is reset to a temporary password that is returned.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
Success
POST /api/v1/users/{userId}/lifecycle/expire_password?tempPassword=true
/api/v1/users/{userId}/lifecycle/reactivate
Reactivates a user. This operation can only be performed on users with a PROVISIONED status. This operation restarts the activation workflow if for some reason the user activation was not completed when using the activationToken from Activate User.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
| sendEmail | query | optional | boolean | Sends an activation email to the user if true |
Success
POST /api/v1/users/{userId}/lifecycle/reactivate
/api/v1/users/{userId}/lifecycle/reset_factors
This operation resets all factors for the specified user. All MFA factor enrollments returned to the unenrolled state. The user’s status remains ACTIVE. This link is present only if the user is currently enrolled in one or more MFA factors.
| Name | In | Required | Type | Description |
|---|---|---|---|---|
| userId | path | required | string | — |
OK
POST /api/v1/users/{userId}/lifecycle/reset_factors