---
title: "Turn automatic approval of managed devices on or off"
method: POST
path: "/organizations/{organizationId}/admin-mfa-approval/setting/auto-approve-managed"
tags: ["Organizations"]
---

# Turn automatic approval of managed devices on or off

`POST /organizations/{organizationId}/admin-mfa-approval/setting/auto-approve-managed`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/admin-mfa-approval/setting/auto-approve-managed`
- Auth: HTTP bearer

Only while organization-wide administrator MFA approval is ACTIVE. Affects new approvals only; existing approvals keep their status.

## Path parameters

- `organizationId` string, required

## Request body

- AdminMfaApprovalAutoApproveManagedMutation
  - `enabled` boolean, required

## Response `200`

Updated setting

- AdminMfaApprovalSetting
  - `enabled` boolean, required
  - `state` 'OFF' | 'ENABLING' | 'ACTIVE' | 'DISABLING', required
  - `setting_version` integer, required
  - `guard_id` string, uuid: Active enable-attempt identifier required as CAS input when disabling.
  - `auto_approve_managed` boolean: When true, a new approval request is approved automatically after MFA when that exact device is enrolled through XFA MDM. Only new requests are affected.

## Other responses

- `400`: Invalid request
- `404`: Organization not found or capability unavailable
- `409`: Approval is not active, or the setting changed concurrently

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)