---
title: "Update security policy"
method: PATCH
path: "/resources/configurations/v1/mfa-policy"
tags: ["MFA settings"]
---

# Update security policy

`PATCH /resources/configurations/v1/mfa-policy`

## Request

- Base URL: `http://localhost:8181`
- URL: `http://localhost:8181/resources/configurations/v1/mfa-policy`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/docs/resources/configurations/v1/mfa-policy/patch.ts> (a function with typed inputs; its response is checked against the schema)

This route updates the MFA policy for all tenants. To update an MFA policy for a specific tenant, send the tenant’s ID in the **`frontegg-tenant-id`** header.

## Headers

- `frontegg-tenant-id` string

## Request body

- MfaPolicyRequest
  - `enforceMFAType` 'DontForce' | 'Force' | 'ForceExceptSAML': Determine whether MFA should be enforced.
  - `allowRememberMyDevice` boolean: Determine whether devices can be remembered and authentication can be skipped.
  - `mfaDeviceExpiration` number: Expiration time of device in seconds

## Response `200`

- MfaPolicyResponse
  - `id` string, required
  - `enforceMFAType` string
  - `allowRememberMyDevice` boolean, required
  - `mfaDeviceExpiration` number, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required

## Other responses

- `400`: Missing parameters to update
- `404`: Security policy not found

---

[API](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp.md) - [All operations](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/llms.txt) - [OpenAPI document](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/revisions/c496ae9e1c3e?raw)