Complete a 2FA reset once liveness has passed, clearing the lost factor so the customer can re-enroll.

The body is required and must carry the end user's endUserIpAddress. For an SMS_OTP reset, also supply the new mobile number — completing the reset enrolls it as the customer's number; other factors need no mobile.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

{
  "endUserIpAddress": "203.0.113.42",
  "mobile": {
    "countryCode": "+1",
    "number": "4155550123"
  }
}