Enroll in MFA with access token

POST

/oauth/mfaEnrollWithToken

Last modified:2026-10-30 21:19:59

OperationId:MFAEnrollToken

Saves an authenticator app as the MFA method for the user who holds the access token, or for the masqueraded user during a masquerade session. Any user can call it with their access token in the ns_access_token cookie or as Authorization: Bearer. The cookie wins when both are present.

Request

Authorization

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Outcome of the enrollment, also returned for a wrong passcode, so check status rather than the HTTP code. success means the enrollment is accepted and applied shortly after. error means a wrong passcode, or that the enrollment could not be queued and nothing changed.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth/mfaEnrollWithToken' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "mfa_key": "JBSWY3DPEHPK3PXP",
    "mfa_vendor": "google",
    "mfa_type": "authenticator",
    "mfa_passcode": "123456"
}'

Response Example

200 - Success

{
    "status": "success",
    "message": "MFA enrollment successful",
    "enrolled": true,
    "apiversion": "46.0.0"
}

Modified at 2026-10-30 21:19:59

Enroll in MFA with username and password

Remove MFA enrollment