Authentication

Start forced TOTP enrollment during login

Only available when the pending token has enrollmentRequired (the org mandates MFA and the user is not enrolled).

post/auth/mfa/setup

Request

  • The document declares no server URL.
  • Auth: none declared

Response

secretstring required

Base32 TOTP secret for manual entry in an authenticator app. Shown only during setup and never again.

otpauthUristring required

otpauth:// URI encoded in the QR code.

qrCodeDataUristring required

QR code for the otpauth URI as a PNG data URI.

Changes

No recorded changes to this operation across all 51 revisions of this API.