Skip to main content
POST
Change the authenticator app

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
password
string | null

The person's password once more: a session alone does not change the second factor.

Required string length: 1 - 1024
totp
string | null

In place of the password, only for a person the tenant's SSO created, who has none: the current code of the authenticator app.

Pattern: ^\d{6}$

Response

The new secret, pending until its first code.

secret
string
required

Base32 TOTP secret, for typing into an authenticator app.

totp_uri
string
required

otpauth:// address of the same secret, for a QR code.