Organizations

Mint a one-time admin-relayed onboarding password for a provisioned IdP user

Mints a high-entropy onboarding password for a provisioned IdP user who has no reusable MFA factor yet, so a brand-new device can bootstrap first-device passwordless IdP onboarding. The plaintext is returned exactly once (only its digest is stored); an admin relays it to the user out of band. Requires an organization administrator (RBAC). Returns 404 when the user is not a provisioned IdP user (no existence leak) and 409 when the user already has a reusable MFA factor.

post/organizations/{organizationId}/idp-users/{email}/onboarding-password

Request

  • Base URL: https://api.xfa.tech
  • URL: https://api.xfa.tech/organizations/{organizationId}/idp-users/{email}/onboarding-password
  • Auth: HTTP bearer

Path parameters

organizationIdstring required

ID of Organization

emailstring required

The IdP user's email

Response

Onboarding password minted

passwordstring required

The generated onboarding password. Only its digest is stored, so it cannot be retrieved again.

expiresAtinteger required

Unix epoch seconds after which the password stops working

Changes

No recorded changes to this operation across all 1 revision of this API.