POST/mfa/enable

Enable MFA with a verification code

Enables multi-factor authentication after validating a code from the user's authenticator app. Supply the six-digit verificationCode generated by the app configured with the setup data. A successful response also returns backup codes.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

1 body field

The authenticator-app verification code used to enable MFA.

verificationCodestringrequired
6-digit TOTP code from the authenticator app. Verifies the user has correctly configured their authenticator.

2 status codes
200Confirms MFA is enabled and returns backup codes.
dataobjectoptional
statusintegeroptional
successbooleanoptional
400Returned when the verification code is invalid.
errorstringoptional
Reason phrase, for example `Bad Request`.
messagestringoptional
statusCodeintegeroptional

Error handling

A 400 is returned when verificationCode is invalid. verificationCode is required and must contain exactly six characters.