---
title: "Reset a user's Opal MFA"
method: POST
path: "/users/{user_id}/mfa/reset"
tags: ["users"]
---

# Reset a user's Opal MFA

`POST /users/{user_id}/mfa/reset`

## Request

- Base URL: `https://api.opal.dev/v1`
- URL: `https://api.opal.dev/v1/users/{user_id}/mfa/reset`
- Auth: HTTP bearer

Deletes the user's Auth0 (Opal) MFA enrollments so they are prompted to
re-enroll on their next sign-in. Only applies to orgs that use Opal/Auth0
for MFA (not available on-prem, and a no-op success for users who have
never signed into Auth0).

## Path parameters

- `user_id` string, uuid, required

## Response `200`

The MFA enrollments were reset, or the user has no Auth0 enrollments
to reset (never signed into Auth0).

- object
  - `success` boolean, required

## Other responses

- `400`: The deployment does not support MFA reset (on-prem), the organization does not use Opal/Auth0 MFA, or the request body contained unknown JSON fields.
- `403`: The caller is not authorized to reset MFA for this user.
- `404`: The user was not found.
- `409`: The Opal system user cannot be modified.

## Changes

- **2026-10-14** `989f80be0574`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/opal/apis/opal-api/changes/users/:user_id/mfa/reset/post.md)

---

[API](https://skmtc.dev/opal/apis/opal-api.md) - [All operations](https://skmtc.dev/opal/apis/opal-api/llms.txt) - [OpenAPI document](https://skmtc.dev/opal/apis/opal-api/revisions/e7877ea96eab?raw)