Remove selected MFA registrations for one user

Administrator only, with the existing MFA gate. Requires a scoped revision from the overview. Preserves other methods and existing sessions. The silent method without deviceId and credentialId removes all silent MFA for this user only. The passkey method includes security keys; credentialId selects one registration, including a silent MFA registration without a device.

delete/organizations/{organizationId}/users/{email}/mfa

Request

  • Base URL: https://api.xfa.tech
  • URL: https://api.xfa.tech/organizations/{organizationId}/users/{email}/mfa
  • Auth: HTTP bearer

Request body

method'totp' | 'passkey' | 'silent' required
revisionstring required
credentialIdstring

Unpadded base64url ID; selects one passkey/security key, or one silent MFA registration without a device. Omit to remove the whole method.

deviceIdstring

Only for silent MFA on one device. Omit both deviceId and credentialId to remove all silent MFA for this user.

Response

Removed or already absent

Changes

No recorded changes to this operation across all 1 revision of this API.