• Replies 4 replies
  • Subscribers 0 subscribers
  • Views 36 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

API Request - Reset 2FA Status

Carl Murphy
27303

Please could you look into creating an endpoint which would enable us to reset a user's 2FA status as seen below:

Currently this is only available to System Administrators and it would be really handy for Helpdesk to be able to do this for clients who are struggling with MFA.

Thanks

Parents

  • Carl Murphy I have been struggling with a similar issue. See my old post and today's comment: https://collaborate.highq.com/sitepoint/viewBlog.action?metaData.siteID=91&metaData.blogID=7259.

    I have not identified a good way to force external users who have not logged in for quite some time to confirm that they retain access to their email address without causing more trouble, which is what will happen if you reset their password, inactivate their account or archive their account.

    But a possible workaround might be to automatically reset a user's 2FA due to inactivity. The reason is that during the process of setting up their 2FA, the user is required to enter a passcode sent to their email address. This would indirectly accomplish my goal. And I suspect adding the capability to reset the 2FA via a REST call would be fairly easy for HighQ to implement.

Reply

  • Carl Murphy I have been struggling with a similar issue. See my old post and today's comment: https://collaborate.highq.com/sitepoint/viewBlog.action?metaData.siteID=91&metaData.blogID=7259.

    I have not identified a good way to force external users who have not logged in for quite some time to confirm that they retain access to their email address without causing more trouble, which is what will happen if you reset their password, inactivate their account or archive their account.

    But a possible workaround might be to automatically reset a user's 2FA due to inactivity. The reason is that during the process of setting up their 2FA, the user is required to enter a passcode sent to their email address. This would indirectly accomplish my goal. And I suspect adding the capability to reset the 2FA via a REST call would be fairly easy for HighQ to implement.

Children
No Data