POST/mfa/disable

Disable MFA

Disables multi-factor authentication (MFA) for the authenticated user. Provide confirmPassword to confirm the action for password-based accounts; SSO-only users can omit it.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

1 body field

Password confirmation for disabling MFA.

confirmPasswordstringoptional
Current account password to confirm the action. Required for password-based accounts. Optional for SSO-only users.

2 status codes
200Returns the successful response envelope with the operation payload in `data`, plus `status` and `success`.
dataunknownoptional
Response payload
statusintegeroptional
successbooleanoptional
400Returned when request validation fails, such as when `confirmPassword` is missing for a password-based account or does not meet its length constraints.
errorstringoptional
Reason phrase, for example `Bad Request`.
messagestringoptional
statusCodeintegeroptional

Error handling

A 400 is returned when confirmPassword fails validation. For password-based accounts, provide it and ensure it is between 8 and 70 characters; SSO-only users can omit it.