---
title: "Get security policy"
method: GET
path: "/resources/configurations/v1/mfa-policy"
tags: ["MFA settings"]
---

# Get security policy

`GET /resources/configurations/v1/mfa-policy`

## Request

- Base URL: `http://localhost:8181`
- URL: `http://localhost:8181/resources/configurations/v1/mfa-policy`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/docs/resources/configurations/v1/mfa-policy/get.ts> (a function with typed inputs; its response is checked against the schema)

This route gets the MFA policy for all tenants. To get the MFA policy for a specific tenant, send the tenant’s ID in the **`frontegg-tenant-id`** header.

## Headers

- `frontegg-tenant-id` string

## Response `200`

- MfaPolicyResponse
  - `id` string, required
  - `enforceMFAType` string
  - `allowRememberMyDevice` boolean, required
  - `mfaDeviceExpiration` number, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required

## Other responses

- `404`: Security Policy not found. MFA is disabled

---

[API](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp.md) - [All operations](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/llms.txt) - [OpenAPI document](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/revisions/c496ae9e1c3e?raw)