---
title: "Enable organization-wide administrator MFA approval"
method: POST
path: "/organizations/{organizationId}/admin-mfa-approval/setting/enable"
tags: ["Organizations"]
---

# Enable organization-wide administrator MFA approval

`POST /organizations/{organizationId}/admin-mfa-approval/setting/enable`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/admin-mfa-approval/setting/enable`
- Auth: HTTP bearer

## Path parameters

- `organizationId` string, required

## Request body

- AdminMfaApprovalSettingMutation
  - `expected_setting_version` integer, required

## Response `200`

Setting enabled

- object
  - `guard_id` string, required
  - `setting` AdminMfaApprovalSetting, required
    - `enabled` boolean, required
    - `state` 'OFF' | 'ENABLING' | 'ACTIVE' | 'DISABLING', required
    - `setting_version` integer, required
    - `guard_id` string, uuid: Active enable-attempt identifier required as CAS input when disabling.
    - `auto_approve_managed` boolean: When true, a new approval request is approved automatically after MFA when that exact device is enrolled through XFA MDM. Only new requests are affected.

## Other responses

- `400`: Invalid request
- `404`: Organization not found
- `409`: Stale setting version, missing administrator device, or application eligibility violations

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)