Enroll in MFA with username and password

POST

/oauth/mfaEnroll

Last modified:2026-10-30 21:19:56

OperationId:MFAEnrollWithoutToken

Saves an authenticator app as a user's MFA method, using the user's username and password instead of an access token. Use it in a login flow before the user has a full token, such as after /netsapiensjs reports mfa_required_setup. A user who already has a token uses /oauth/mfaEnrollWithToken instead.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The enrollment is accepted and applied shortly after, so a login made at once may not see it yet.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠409Conflict

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth/mfaEnroll' \
--header 'Content-Type: application/json' \
--data-raw '{
    "ns_id": "1001@example.com",
    "ns_id_type": "subscriber",
    "mfa_key": "JBSWY3DPEHPK3PXP",
    "mfa_vendor": "google",
    "mfa_type": "authenticator",
    "mfa_passcode": "123456",
    "username": "1001@example.com",
    "password": "{{user_password}}"
}'

Response Example

200 - Success

{
    "status": "success",
    "message": "MFA enrollment successful",
    "enrolled": true,
    "apiversion": "46.0.0"
}

Modified at 2026-10-30 21:19:56

Verify MFA passcode

Enroll in MFA with access token