Admin Disable MFA

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType} \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "detail": "Property foo is required but is missing.",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "https://example.com/errors/example",
  "upstream": {
    "code": "E4001",
    "message": "account not found at provider"
  }
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Admin Disable MFA

Turns off one of ANOTHER member’s channels — the route for a member locked out by a lost device, or by a legacy sms enrollment.

{id} is the TARGET, not the administrator.

app, email and sms are all accepted. sms is CLEARING ONLY — the channel is retired and cannot be re-enrolled — and this is the only route that can clear it for somebody else: the whole-account reset DELETE /v1/users/{id}/mfa refuses an administrator’s token, and a member holding only a legacy sms enrollment cannot sign in to obtain their own. Clearing it also unblocks DELETE /v1/users/{id}/phone.

⚠️ This LOWERS someone else’s protection without their participation, and it is the step an attacker who reaches an administrative token would take first.

No confirmation code is taken, by design: an administrator holds neither the member’s authenticator nor their mailbox, so there is no code they could legitimately produce. The administrative MFA resource is what authorizes this route.

On success the response has no body (204).

Failures:

400 — the channel name is not one this deployment serves.
403 — your token does not hold the administrative MFA resource.
404 — no such user.
503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

DELETE

users

{id}

mfa

admin

{mfaType}

Admin Disable MFA

curl --request DELETE \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType} \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://identity.sandbox.lerian.net/v1/users/{id}/mfa/admin/{mfaType}"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "detail": "Property foo is required but is missing.",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "https://example.com/errors/example",
  "upstream": {
    "code": "E4001",
    "message": "account not found at provider"
  }
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

{
  "code": "<string>",
  "entityType": "<string>",
  "err": "<unknown>",
  "message": "<string>",
  "title": "<string>"
}

Autorizações

Authorization

string

header

obrigatório

JWT bearer token issued by the identity provider.

Parâmetros de caminho

string

obrigatório

Target User ID — the member whose channel is being disabled, NOT the administrator.

Exemplo:

"00000000-0000-0000-0000-000000000000"

mfaType

string

obrigatório

Which channel to disable: app, email, or sms (a legacy enrollment that can be cleared but never re-enrolled).

Exemplo:

"app"

Resposta

No Content

Visão geral

Autenticação

Login único

Autorização

Informações do usuário

MFA de login

Passkey de login

Visão geral de identidade

Grupos

Aplicações

Parceiros

Usuários

MFA da conta

Passkey da conta

Provedores de identidade

Provedores de aplicações

Permissões

Funções

Políticas de segurança

Declarações de plugins

Tratamento de erros

Admin Disable MFA

Autorizações

Parâmetros de caminho

Resposta