---
title: "What your organizations ask of you: two-step sign-in, session limits."
method: GET
path: "/v1/organizations/requirements"
tags: ["organizations"]
---

# What your organizations ask of you: two-step sign-in, session limits.

`GET /v1/organizations/requirements`

## Request

- Base URL: `https://api.50heads.com`
- URL: `https://api.50heads.com/v1/organizations/requirements`
- Auth: HTTP bearer

Read after sign-in. With `twoStep.required` and not `enrolled`, set up two-step sign-in or a passkey first.

## Response `200`

OK

- OrganizationRequirementsResponse
  - `requirements` object, required
    - `twoStep` object, required
      - `required` boolean, required
      - `enrolled` boolean, required
      - `organizationIds` string[], required
    - `maxSessionAgeMinutes` integer, nullable, required
    - `idleTimeoutMinutes` integer, nullable, required
    - `reauthWindowMinutes` integer, nullable, required

## Other responses

- `401`: No key or token, or it expired or was revoked.
- `403`: The key or token lacks the scope (`insufficient_scope`), or the action is not allowed.
- `429`: Too many requests; wait for Retry-After.

---

[API](https://skmtc.dev/50heads/apis/50heads-api.md) · [All operations](https://skmtc.dev/50heads/apis/50heads-api/llms.txt) · [OpenAPI document](https://skmtc.dev/50heads/apis/50heads-api/revisions/20175e8b00e3?raw)