Skip to main content
POST
Complete a 2FA reset

Authorizations

Authorization
string
header
required

API token authentication using format <api token id>:<api client secret>

Path Parameters

resetId
string
required

The reset handle returned by the start call.

Query Parameters

customerId
string
required

The unique identifier of the customer completing the reset.

Body

application/json

Completes a 2FA reset. The body is required and carries the IP address the end user is completing the reset from; mobile is only needed when resetting the SMS_OTP factor to a new phone number.

endUserIpAddress
string
required

The IP address of the end user's device completing this reset, recorded against the reset by the SCA provider. Supply the customer's address, not your server's — it feeds the provider's risk assessment of the recovery.

Example:

"203.0.113.42"

mobile
object

For an SMS_OTP reset, the new mobile number to enroll as the customer completes the reset. Required for an SMS_OTP reset; ignored for TOTP / PASSKEY resets.

Response

Reset completed; no content is returned.