2FA Management Workflow

Fresh

Overview

Complete workflow for managing two-factor authentication across users and workspaces.

Enable/Disable Flow

Order of Operations

Critical Ordering

Enabling: Workspace first, then users. Disabling: Users first, then workspace. Reversing this order will fail.

Enable 2FA (correct order)

Disable 2FA (correct order)

Device Management Rules

Rule	Description
Minimum 1 device	Cannot revoke the last remaining 2FA device
Multiple revokes	Can revoke multiple devices in sequence
Device ID source	From setup_2fa response or get_devices_2fa
UUID format	device_id must be a valid UUID

See Also

• 2FA API Reference
• Authentication Guide
• Error Codes