Users

Unlock a user's MFA.

Changed on Oct 10, 2026

Unlocks a user locked after five consecutive bad MFA codes and resets the count. Requires an administrator as well as the scope. Recorded as a user_mfa_unlocked audit event naming the calling administrator and API key. Requires the users:write scope.

post/api/users/{username}/mfa/unlock

Request

Base URL
/ (relative, and the document was published on a file host, not at the API’s origin)
URL
/api/users/{username}/mfa/unlock
Auth
HTTP bearer

Path parameters

usernamestring required

Headers

Authorizationstring required

Response

The user was unlocked.

Changes

Oct 10, 2026c4f85daa9208 Revision changes
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
- info
  added the optional property to the response with the status
Oct 5, 20264082c17721d8 Revision changes
- breaking
  removed the media type */* for the response with the status
- breaking
  removed the media type */* for the response with the status
- breaking
  removed the media type */* for the response with the status
- breaking
  removed the media type */* for the response with the status
- breaking
  removed the media type */* for the response with the status
- breaking
  removed the media type */* for the response with the status
- info
  added the media type application/json for the response with the status
- info
  added the media type application/json for the response with the status
- info
  added the media type application/json for the response with the status
- info
  added the media type application/json for the response with the status
- info
  added the media type application/json for the response with the status
- info
  added the media type application/json for the response with the status

Operation history (3 revisions)