• Replies 4 replies
  • Subscribers 0 subscribers
  • Views 34 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

API Request - Reset 2FA Status

Carl Murphy
27303

Please could you look into creating an endpoint which would enable us to reset a user's 2FA status as seen below:

Currently this is only available to System Administrators and it would be really handy for Helpdesk to be able to do this for clients who are struggling with MFA.

Thanks

  • Carl Murphy I have been struggling with a similar issue. See my old post and today's comment: https://collaborate.highq.com/sitepoint/viewBlog.action?metaData.siteID=91&metaData.blogID=7259.

    I have not identified a good way to force external users who have not logged in for quite some time to confirm that they retain access to their email address without causing more trouble, which is what will happen if you reset their password, inactivate their account or archive their account.

    But a possible workaround might be to automatically reset a user's 2FA due to inactivity. The reason is that during the process of setting up their 2FA, the user is required to enter a passcode sent to their email address. This would indirectly accomplish my goal. And I suspect adding the capability to reset the 2FA via a REST call would be fairly easy for HighQ to implement.

  • Imran Aziz - hi Imran, just wondering if you have seen this and whether it would be possible to get on the roadmap?

    Thanks

    cc: Peter Simpson

  • Please can you let me know if there is an update on this Imran Aziz?

  • Looking at my comment above, instead of (or in addition to) resetting a user's 2FA due to inactivity, there could be a setting to require users to reset their 2FA every 90 days (similar to but instead of requiring users to reset their passwords every 90 days). As noted above, that will require users to confirm their email addresses but without forcing them to reset their password, which is always painful.