---
title: "Reset a system user's MFA token"
method: POST
path: "/api/systemusers/{id}/resetmfa"
tags: ["Systemusers"]
---

# Reset a system user's MFA token

`POST /api/systemusers/{id}/resetmfa`

## Request

- Base URL: `https://console.jumpcloud.com`
- URL: `https://console.jumpcloud.com/api/systemusers/{id}/resetmfa`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/docs/api/systemusers/:id/resetmfa/post.ts> (a function with typed inputs; its response is checked against the schema)

This endpoint resets the user's TOTP key and initiates a new MFA enrollment period. The user will be prompted to set up MFA at their next login. If `Unified MFA is enabled`, this action will also delete the user's existing Push Notification endpoint.
Warning: The user must complete the setup before the `exclusionUntil` date to avoid being locked out of MFA-protected resources.

Please refer to our [Knowledge Base Article](https://support.jumpcloud.com/customer/en/portal/articles/2959138-using-multifactor-authentication-with-jumpcloud) on setting up MFA for more information.

#### Sample Request
```
curl -X POST \
  https://console.jumpcloud.com/api/systemusers/{UserID}/resetmfa \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -H 'x-api-key: {API_KEY}' \
  -d '{"exclusion": true, "exclusionUntil": "{date-time}"}'

```

## Headers

- `x-org-id` string

## Request body

- object
  - `exclusion` boolean
  - `exclusionUntil` string, date-time
  - `exclusionDays` number

## Response `200`

OK

- string

## Other responses

- `400`: Bad Request
- `401`: Unauthenticated
- `403`: Unauthorized
- `404`: Not Found
- `409`: Conflict
- `500`: Internal Server Error

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-console-api/revisions/f396d9271b46?raw)