security.md

Security

51 operation(s). Part of the API index.

Call these as client.<service>.<method>(...). <service> is the client field for this group — the README lists the field name for every service. These pages group operations the way the OpenAPI specification tags them, which is not always one field per page.

---

accountRegisterMFAPasskeyBegin

GET /identity/v2/auth/account/2fa/register/passkey/begin

Begin MFA Passkey registration

Initiates the MFA Passkey registration flow for an Account.

Example

public static void callAccountRegisterMFAPasskeyBegin(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.accountRegisterMFAPasskeyBegin(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

object

---

accountRegisterMFAPasskeyFinish

POST /identity/v2/auth/account/2fa/register/passkey/finish

Complete MFA Passkey registration

Completes the MFA Passkey registration flow for an Account.

Example

public static void callAccountRegisterMFAPasskeyFinish(LoginRadiusClient client) {
  AccountRegisterMFAPasskeyFinishRequest accountRegisterMFAPasskeyFinishRequest = new AccountRegisterMFAPasskeyFinishRequest().passkeyCredential("<passkeyCredential>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.accountRegisterMFAPasskeyFinish(accountRegisterMFAPasskeyFinishRequest, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

object as application/json.

Returns

PasskeyCredentialObject

---

beginMFAPasskeyRegistration

GET /identity/v2/auth/login/2fa/register/passkey/begin

Begin Passkey Registration with MFA Token

Begins the MFA Passkey registration flow.

Example

public static void callBeginMFAPasskeyRegistration(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required

  try {
    var response = client.security.beginMFAPasskeyRegistration(secondfactorauthenticationtoken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token

Returns

object

---

beginPasskeyMFAVerification

GET /identity/v2/auth/login/2fa/passkey/begin

Begin Passkey Login with MFA Token

Begins the MFA Passkey verification flow.

Example

public static void callBeginPasskeyMFAVerification(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required

  try {
    var response = client.security.beginPasskeyMFAVerification(secondfactorauthenticationtoken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token

Returns

object

---

changePinByAccessToken

PUT /identity/v2/auth/pin/change

Update PIN with Access Token

Updates an existing PIN by providing the current PIN and a valid Access Token for authentication, allowing a User to change their PIN while logged in.

Example

public static void callChangePinByAccessToken(LoginRadiusClient client) {
  ChangePin changePin = new ChangePin().oldpin("<oldpin>").newpin("<newpin>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean xPreventWebhook = true; //Optional
  Boolean preventWebhook = true; //Optional
  String gRecaptchaResponse = "<gRecaptchaResponse>"; //Optional
  String gRecaptchaResponse2 = "<gRecaptchaResponse2>"; //Optional
  String hCaptchaResponse = "<hCaptchaResponse>"; //Optional
  String qqCaptchaTicket = "<qqCaptchaTicket>"; //Required
  String qqCaptchaRandstr = "<qqCaptchaRandstr>"; //Required

  try {
    var response = client.security.changePinByAccessToken(changePin, accessToken, xPreventWebhook, preventWebhook, gRecaptchaResponse, gRecaptchaResponse2, hCaptchaResponse, qqCaptchaTicket, qqCaptchaRandstr);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
g-recaptcha-response	query	string	no	Google reCAPTCHA response parameter which will be sent to the server for verification.
g_recaptcha_response	query	string	no	Google reCAPTCHA Response
h-captcha-response	query	string	no	hCaptcha Response
qq_captcha_ticket	query	string	no	QQ Captcha ticket (required if Bot Protection is enabled)
qq_captcha_randstr	query	string	no	QQ Captcha rand string (required if Bot Protection is enabled)

Request body

ChangePin as application/json.

Returns

IsPostedResponse

---

duoAuthenticationReAuthVerificationByAccessToken

PUT /identity/v2/auth/account/reauth/2fa/duo

Verify Duo

Verifies Duo authentication for a User using an Access Token, typically used when re-verification is required.

Example

public static void callDuoAuthenticationReAuthVerificationByAccessToken(LoginRadiusClient client) {
  DuoVerifyRequest duoVerifyRequest = new DuoVerifyRequest().state("<state>").code("<code>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.duoAuthenticationReAuthVerificationByAccessToken(duoVerifyRequest, preventWebhook, xPreventWebhook, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
access_token	query	string	no	Access Token of the User

Request body

DuoVerifyRequest as application/json.

Returns

ReAuthResponse

---

duoAuthenticationVerificationByAccessToken

PUT /identity/v2/auth/account/2fa/duo

Verify Duo authentication

Verifies Duo authentication for a User using an Access Token, typically after initial authentication.

Example

public static void callDuoAuthenticationVerificationByAccessToken(LoginRadiusClient client) {
  DuoVerifyRequest duoVerifyRequest = new DuoVerifyRequest().state("<state>").code("<code>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String accessToken = "<accessToken>"; //Optional
  String fields = "<fields>"; //Optional

  try {
    var response = client.security.duoAuthenticationVerificationByAccessToken(duoVerifyRequest, preventWebhook, xPreventWebhook, accessToken, fields);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
access_token	query	string	no	Access Token of the User
fields	query	string	no	Comma-separated list of profile fields to include in the response.

Request body

DuoVerifyRequest as application/json.

Returns

Profile

---

duoAuthVerificationByMFASecondFactorToken

PUT /identity/v2/auth/login/2fa/duo

Verify Duo with MFA Token

Verifies Duo authentication for a User using a second factor token.

Example

public static void callDuoAuthVerificationByMFASecondFactorToken(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  DuoVerifyRequest duoVerifyRequest = new DuoVerifyRequest().state("<state>").code("<code>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String fields = "<fields>"; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbaoneclickemailtemplate = "<rbaoneclickemailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbaotpsmstemplate = "<rbaotpsmstemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.duoAuthVerificationByMFASecondFactorToken(secondfactorauthenticationtoken, duoVerifyRequest, preventWebhook, xPreventWebhook, fields, rbabrowseremailtemplate, rbaoneclickemailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbaotpsmstemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
fields	query	string	no	Comma-separated list of profile fields to include in the response.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbaoneclickemailtemplate	query	string	no	RBA one click Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA is enabled for the Tenant with one click sign in as a MFA option.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbaotpsmstemplate	query	string	no	RBA OTP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

DuoVerifyRequest as application/json.

Returns

AuthResponse

---

emailOTPAuthVerificationByAccessToken

PUT /identity/v2/auth/account/2fa/email

Verify Email OTP

Verifies Email OTP authentication for a User using an Access Token.

Example

public static void callEmailOTPAuthVerificationByAccessToken(LoginRadiusClient client) {
  ReAuthModelByEmailOtp reAuthModelByEmailOtp = new ReAuthModelByEmailOtp().emailid("<emailid>").otp("<otp>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String accessToken = "<accessToken>"; //Optional
  String fields = "<fields>"; //Optional

  try {
    var response = client.security.emailOTPAuthVerificationByAccessToken(reAuthModelByEmailOtp, preventWebhook, xPreventWebhook, accessToken, fields);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
access_token	query	string	no	Access Token of the User
fields	query	string	no	Comma-separated list of profile fields to include in the response.

Request body

ReAuthModelByEmailOtp as application/json.

Returns

Profile

---

finishMFAPasskeyRegistration

POST /identity/v2/auth/login/2fa/register/passkey/finish

Complete Passkey registration

Completes the MFA Passkey registration process using the provided MFA token.

Example

public static void callFinishMFAPasskeyRegistration(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  FinishMFAPasskeyRegistrationRequest finishMFAPasskeyRegistrationRequest = new FinishMFAPasskeyRegistrationRequest().passkeyCredential("<passkeyCredential>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String fields = "<fields>"; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbaoneclickemailtemplate = "<rbaoneclickemailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbaotpsmstemplate = "<rbaotpsmstemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.finishMFAPasskeyRegistration(secondfactorauthenticationtoken, finishMFAPasskeyRegistrationRequest, preventWebhook, xPreventWebhook, fields, rbabrowseremailtemplate, rbaoneclickemailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbaotpsmstemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
fields	query	string	no	Comma-separated list of profile fields to include in the response.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbaoneclickemailtemplate	query	string	no	RBA one click Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA is enabled for the Tenant with one click sign in as a MFA option.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbaotpsmstemplate	query	string	no	RBA OTP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

object as application/json.

Returns

AuthResponse

---

finishPasskeyMFAVerification

POST /identity/v2/auth/login/2fa/passkey/finish

Complete Passkey Login with MFA Token

Completes the MFA Passkey verification flow.

Example

public static void callFinishPasskeyMFAVerification(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  FinishPasskeyMFAVerificationRequest finishPasskeyMFAVerificationRequest = new FinishPasskeyMFAVerificationRequest().passkeyCredential("<passkeyCredential>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String fields = "<fields>"; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbaoneclickemailtemplate = "<rbaoneclickemailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbaotpsmstemplate = "<rbaotpsmstemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.finishPasskeyMFAVerification(secondfactorauthenticationtoken, finishPasskeyMFAVerificationRequest, preventWebhook, xPreventWebhook, fields, rbabrowseremailtemplate, rbaoneclickemailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbaotpsmstemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
fields	query	string	no	Comma-separated list of profile fields to include in the response.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbaoneclickemailtemplate	query	string	no	RBA one click Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA is enabled for the Tenant with one click sign in as a MFA option.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbaotpsmstemplate	query	string	no	RBA OTP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

object as application/json.

Returns

AuthResponse

---

forgotPinByEmail

POST /identity/v2/auth/pin/forgot/email

Send PIN Reset Email

Sends a PIN reset Email to the User's registered Email, enabling them to reset their PIN if forgotten.

Example

public static void callForgotPinByEmail(LoginRadiusClient client) {
  ForgotPinByEmail forgotPinByEmail = new ForgotPinByEmail().email("<email>"); //Required
  String emailtemplate = "<emailtemplate>"; //Optional
  String resetpinurl = "<resetpinurl>"; //Optional

  try {
    var response = client.security.forgotPinByEmail(forgotPinByEmail, emailtemplate, resetpinurl);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
emailtemplate	query	string	no	Name of the Email template to use for this notification.
resetpinurl	query	string	no	Reset PIN URL

Request body

ForgotPinByEmail as application/json.

Returns

IsPostedResponse

---

forgotPinByPhone

POST /identity/v2/auth/pin/forgot/otp

Send OTP for PIN Reset

Sends a One-Time Password (OTP) to the User's registered Phone number, enabling them to reset their PIN if forgotten.

Example

public static void callForgotPinByPhone(LoginRadiusClient client) {
  ForgotPinByPhone forgotPinByPhone = new ForgotPinByPhone().phone("<phone>"); //Required
  String smstemplate = "<smstemplate>"; //Optional
  Boolean isvoiceotp = true; //Optional

  try {
    var response = client.security.forgotPinByPhone(forgotPinByPhone, smstemplate, isvoiceotp);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
smstemplate	query	string	no	SMS Template
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.

Request body

ForgotPinByPhone as application/json.

Returns

SMSResponse

---

forgotPinByUsername

POST /identity/v2/auth/pin/forgot/username

Send PIN Reset Email by Username

Sends a PIN reset Email to the User IDentified by their Username, enabling them to reset their PIN if forgotten.

Example

public static void callForgotPinByUsername(LoginRadiusClient client) {
  ForgotPinByUsername forgotPinByUsername = new ForgotPinByUsername().username("<username>"); //Required
  String emailtemplate = "<emailtemplate>"; //Optional
  String resetpinurl = "<resetpinurl>"; //Optional

  try {
    var response = client.security.forgotPinByUsername(forgotPinByUsername, emailtemplate, resetpinurl);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
emailtemplate	query	string	no	Name of the Email template to use for this notification.
resetpinurl	query	string	no	Reset PIN URL

Request body

ForgotPinByUsername as application/json.

Returns

IsPostedResponse

---

getMfaPushDeviceStatus

GET /identity/v2/auth/account/2fa/push/ping

Check push device registration status

Checks whether a Push Notification device is registered on the User's profile for MFA, using an Access Token.

Example

public static void callGetMfaPushDeviceStatus(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.getMfaPushDeviceStatus(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

IsRegistered

---

getMFASettings

GET /identity/v2/auth/account/2fa

Retrieve MFA settings

Retrieves all MFA settings configured for the User, including the status of each authenticator type and available configuration details.

Example

public static void callGetMFASettings(LoginRadiusClient client) {
  String duoredirecturi = "<duoredirecturi>"; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.getMFASettings(duoredirecturi, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
duoredirecturi	query	string	no	Duo auth redirection url.
access_token	query	string	no	Access Token of the User

Returns

TwoFactorAuthenticationSettings

---

mfaGenerateBackupCodes

GET /identity/v2/auth/account/2fa/backupcode

Generate backup codes

Generates a set of backup codes for a User with MFA enabled. Returns an error if backup codes already exist.

Example

public static void callMfaGenerateBackupCodes(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.mfaGenerateBackupCodes(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

MFABackUpCodeResponse

---

mfaResendPushNotification

POST /identity/v2/auth/login/2fa/push

Resend Push Notification

Resends a Push Notification for Multi-Factor Authentication.

Example

public static void callMfaResendPushNotification(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required

  try {
    var response = client.security.mfaResendPushNotification(secondfactorauthenticationtoken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token

Returns

IsPostedResponse

---

mfaResetBackupCodes

GET /identity/v2/auth/account/2fa/backupcode/reset

Reset backup codes

Resets backup codes for a User with MFA enabled, allowing regeneration of backup codes.

Example

public static void callMfaResetBackupCodes(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.mfaResetBackupCodes(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

MFABackUpCodeResponse

---

mFAResetSMSAuthByToken

DELETE /identity/v2/auth/account/2fa/sms

Reset SMS Authenticator

Resets SMS Authenticator configurations for an Account using an Access Token.

Example

public static void callMFAResetSMSAuthByToken(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.mFAResetSMSAuthByToken(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

IsDeleted

---

mFAResetTotpByToken

DELETE /identity/v2/auth/account/2fa/totp

Reset TOTP

Resets TOTP Authenticator configurations for an Account using an Access Token.

Example

public static void callMFAResetTotpByToken(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.mFAResetTotpByToken(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

IsDeleted

---

mFAUpdatePhoneNumberByMfaToken

PUT /identity/v2/auth/login/2fa/sms/phone

Update Phone with MFA Token

Sends a verification OTP to the provided Phone number as part of the process to update the Phone number used for Multi-Factor Authentication.

Example

public static void callMFAUpdatePhoneNumberByMfaToken(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = new String(); //Required
  MFAPhoneUpdateModel mfAPhoneUpdateModel = "<mfAPhoneUpdateModel>"; //Required
  String smstemplate2fa = "<smstemplate2fa>"; //Optional
  Boolean isvoiceotp = true; //Optional

  try {
    var response = client.security.mFAUpdatePhoneNumberByMfaToken(secondfactorauthenticationtoken, mfAPhoneUpdateModel, smstemplate2fa, isvoiceotp);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
smstemplate2fa	query	string	no	SMS template name to be used for sending the 2FA code to the User.
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.

Request body

MFAPhoneUpdateModel as application/json.

Returns

SMSResponseData

---

mFAUpdatePhoneNumberByToken

PUT /identity/v2/auth/account/2fa/sms/phone

Update Phone by token

Sends a verification OTP to the provided Phone number as part of the process to update the Phone number used for MFA.

Example

public static void callMFAUpdatePhoneNumberByToken(LoginRadiusClient client) {
  MFAPhoneUpdateModel mfAPhoneUpdateModel = new MFAPhoneUpdateModel().phoneno2fa("<phoneno2fa>"); //Required
  String smstemplate2fa = "<smstemplate2fa>"; //Optional
  Boolean isvoiceotp = true; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.mFAUpdatePhoneNumberByToken(mfAPhoneUpdateModel, smstemplate2fa, isvoiceotp, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
smstemplate2fa	query	string	no	SMS template name to be used for sending the 2FA code to the User.
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.
access_token	query	string	no	Access Token of the User

Request body

MFAPhoneUpdateModel as application/json.

Returns

SMSResponseData

---

mFAVerifyPhoneNumberByAccessToken

PUT /identity/v2/auth/account/2fa/sms

Verify Phone MFA

Updates Phone-based MFA settings after a successful login, managing or verifying Phone MFA configurations for secure operations.

Example

public static void callMFAVerifyPhoneNumberByAccessToken(LoginRadiusClient client) {
  MFAVerifyPhoneOtpModel mfAVerifyPhoneOtpModel = new MFAVerifyPhoneOtpModel().otp("<otp>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String fields = "<fields>"; //Optional

  try {
    var response = client.security.mFAVerifyPhoneNumberByAccessToken(mfAVerifyPhoneOtpModel, accessToken, preventWebhook, xPreventWebhook, fields);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
fields	query	string	no	Comma-separated list of profile fields to include in the response.

Request body

MFAVerifyPhoneOtpModel as application/json.

Returns

Profile

---

pingPushVerificationStatus

GET /identity/v2/auth/login/2fa/push/ping

Check Push Notification Verification Status

Checks the status of Push Notification verification and returns the login response when verified.

Example

public static void callPingPushVerificationStatus(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbaoneclickemailtemplate = "<rbaoneclickemailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbaotpsmstemplate = "<rbaotpsmstemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.pingPushVerificationStatus(secondfactorauthenticationtoken, rbabrowseremailtemplate, rbaoneclickemailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbaotpsmstemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbaoneclickemailtemplate	query	string	no	RBA one click Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA is enabled for the Tenant with one click sign in as a MFA option.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbaotpsmstemplate	query	string	no	RBA OTP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Returns

AuthResponse

---

pINLogin

POST /identity/v2/auth/login/pin

Login with PIN

Allows Users to log in using their previously set PIN along with a valid session token.

Example

public static void callPINLogin(LoginRadiusClient client) {
  String sessionToken = new String(); //Required
  PINLoginModel piNLoginModel = "<piNLoginModel>"; //Required
  Boolean xPreventWebhook = true; //Optional
  Boolean preventWebhook = true; //Optional
  String gRecaptchaResponse = "<gRecaptchaResponse>"; //Optional
  String gRecaptchaResponse2 = "<gRecaptchaResponse2>"; //Optional
  String qqCaptchaTicket = "<qqCaptchaTicket>"; //Required
  String qqCaptchaRandstr = "<qqCaptchaRandstr>"; //Required
  String hCaptchaResponse = "<hCaptchaResponse>"; //Optional

  try {
    var response = client.security.pINLogin(sessionToken, piNLoginModel, xPreventWebhook, preventWebhook, gRecaptchaResponse, gRecaptchaResponse2, qqCaptchaTicket, qqCaptchaRandstr, hCaptchaResponse);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
session_token	query	string	yes	Session Token for PIN Auth
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
g-recaptcha-response	query	string	no	Google reCAPTCHA response parameter which will be sent to the server for verification.
g_recaptcha_response	query	string	no	Google reCAPTCHA Response
qq_captcha_ticket	query	string	no	QQ Captcha ticket (required if Bot Protection is enabled)
qq_captcha_randstr	query	string	no	QQ Captcha rand string (required if Bot Protection is enabled)
h-captcha-response	query	string	no	hCaptcha Response

Request body

PINLoginModel as application/json.

Returns

AuthResponse

---

reauthPassword

PUT /identity/v2/auth/account/reauth/password

Verify Password

Verifies the Password for a User using an Access Token, typically used when re-verification is required.

Example

public static void callReauthPassword(LoginRadiusClient client) {
  PasswordReauthRequest passwordReauthRequest = new PasswordReauthRequest().g-recaptcha-response("<g-recaptcha-response>").qq_captcha_ticket("<qq_captcha_ticket>").qq_captcha_randstr("<qq_captcha_randstr>"); //Required
  String accessToken = "<accessToken>"; //Optional
  String smstemplate = "<smstemplate>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String gRecaptchaResponse = "<gRecaptchaResponse>"; //Optional
  String gRecaptchaResponse2 = "<gRecaptchaResponse2>"; //Optional
  String qqCaptchaTicket = "<qqCaptchaTicket>"; //Optional
  String qqCaptchaRandstr = "<qqCaptchaRandstr>"; //Optional
  String hCaptchaResponse = "<hCaptchaResponse>"; //Optional

  try {
    var response = client.security.reauthPassword(passwordReauthRequest, accessToken, smstemplate, preventWebhook, xPreventWebhook, gRecaptchaResponse, gRecaptchaResponse2, qqCaptchaTicket, qqCaptchaRandstr, hCaptchaResponse);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
smstemplate	query	string	no	SMS Template
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
g-recaptcha-response	query	string	no	Google reCAPTCHA response parameter which will be sent to the server for verification.
g_recaptcha_response	query	string	no	Google reCAPTCHA Response
qq_captcha_ticket	query	string	no	QQ reCAPTCHA Response
qq_captcha_randstr	query	string	no	QQ reCAPTCHA Response
h-captcha-response	query	string	no	hCaptcha Response

Request body

PasswordReauthRequest as application/json.

Returns

ReAuthResponse

---

reauthPin

PUT /identity/v2/auth/account/reauth/pin

Verify PIN

Verifies the PIN for a User using an Access Token, typically used when re-verification is required.

Example

public static void callReauthPin(LoginRadiusClient client) {
  PinReauthRequest pinReauthRequest = new PinReauthRequest().pin("<pin>"); //Required
  String smstemplate = "<smstemplate>"; //Optional
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.reauthPin(pinReauthRequest, smstemplate, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
smstemplate	query	string	no	SMS Template
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

PinReauthRequest as application/json.

Returns

ReAuthResponse

---

reauthTrigger

GET /identity/v2/auth/account/reauth/2fa

Retrieve Step-Up Authentication settings

Triggers Step-Up Authentication for Multi-Factor Authentication (MFA) settings, allowing Users to verify their MFA methods.

Example

public static void callReauthTrigger(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional
  String smstemplate2fa = "<smstemplate2fa>"; //Optional
  String duoredirecturi = "<duoredirecturi>"; //Optional

  try {
    var response = client.security.reauthTrigger(accessToken, smstemplate2fa, duoredirecturi);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
smstemplate2fa	query	string	no	SMS template name to be used for sending the 2FA code to the User.
duoredirecturi	query	string	no	Duo auth redirection url.

Returns

TwoFactorAuthenticationSettings

---

resend2FAOTP

GET /identity/v2/auth/login/2fa/resend

Resend SMS OTP with MFA Token

Resends the Multi-Factor Authentication OTP via SMS for login.

Example

public static void callResend2FAOTP(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  Boolean isvoiceotp = true; //Optional

  try {
    var response = client.security.resend2FAOTP(secondfactorauthenticationtoken, isvoiceotp);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.

Returns

SMSResponseData

---

resend2faSMSOtp

GET /identity/v2/auth/login/2fa/sms/resend

Resend SMS OTP with MFA Token

Resends the Multi-Factor Authentication OTP via SMS for login.

Example

public static void callResend2faSMSOtp(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  Boolean isvoiceotp = true; //Optional

  try {
    var response = client.security.resend2faSMSOtp(secondfactorauthenticationtoken, isvoiceotp);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.

Returns

SMSResponseData

---

resendEmailOTPMFAToken

POST /identity/v2/auth/login/2fa/email

Resend Email OTP with MFA Token

Sends the OTP to the Email if the Email OTP authenticator is enabled in the Tenant's MFA configuration.

Example

public static void callResendEmailOTPMFAToken(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  EmailModel emailModel = new EmailModel().email("<email>"); //Required
  Boolean isvoiceotp = true; //Optional
  String emailtemplate2fa = "<emailtemplate2fa>"; //Optional

  try {
    var response = client.security.resendEmailOTPMFAToken(secondfactorauthenticationtoken, emailModel, isvoiceotp, emailtemplate2fa);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.
emailtemplate2fa	query	string	no	Name of the 2FA Email template to use for this notification.

Request body

EmailModel as application/json.

Returns

IsPostedResponse

---

resendTwoFactorEmailOtp

GET /identity/v2/auth/account/2fa/email

Resend Email OTP

Sends the OTP to the Email if the Email OTP Authenticator is enabled in the Tenant's MFA configuration.

Example

public static void callResendTwoFactorEmailOtp(LoginRadiusClient client) {
  String emailid = "<emailid>"; //Optional
  String emailtemplate2fa = "<emailtemplate2fa>"; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.resendTwoFactorEmailOtp(emailid, emailtemplate2fa, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
emailid	query	string (email)	no	The Email address of User
emailtemplate2fa	query	string	no	Name of the 2FA Email template to use for this notification.
access_token	query	string	no	Access Token of the User

Returns

IsPostedResponse

---

resetDuoAuthViaAccessToken

DELETE /identity/v2/auth/account/2fa/duo

Reset Duo Authenticator

Resets the Duo Authenticator settings for a User with MFA enabled, allowing reconfiguration or recovery of Duo access.

Example

public static void callResetDuoAuthViaAccessToken(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.resetDuoAuthViaAccessToken(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

IsDeleted

---

resetMFAEmailAuthByAccessToken

DELETE /identity/v2/auth/account/2fa/email

Reset Email OTP Authenticator

Resets the Email OTP Authenticator settings for a User with MFA enabled, allowing reconfiguration.

Example

public static void callResetMFAEmailAuthByAccessToken(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.resetMFAEmailAuthByAccessToken(accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User

Returns

IsDeleted

---

resetMFAPasskeyByAccessToken

DELETE /identity/v2/auth/account/2fa/passkey

Reset Passkey Authenticator

Resets the Passkey Authenticator settings for the specified User.

Example

public static void callResetMFAPasskeyByAccessToken(LoginRadiusClient client) {
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.resetMFAPasskeyByAccessToken(accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Returns

IsDeleted

---

resetMfaPushAuthSettings

DELETE /identity/v2/auth/account/2fa/push

Reset MFA Push Notification

Resets the MFA Push Authenticator settings for a User.

Example

public static void callResetMfaPushAuthSettings(LoginRadiusClient client) {
  try {
    var response = client.security.resetMfaPushAuthSettings();
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Returns

IsDeleted

---

resetPinByOTP

PUT /identity/v2/auth/pin/reset/otp/{type}

Reset PIN with OTP

Allows a User to reset their PIN by verifying a One-Time Password (OTP). The User must provide the OTP, a new PIN, and one identifier (Phone, Email, or Username), enabling secure PIN recovery when the User forgets their PIN.

Example

public static void callResetPinByOTP(LoginRadiusClient client) {
  String type = "<type>"; //Required
  ResetPINByOTP resetPINByOTP = new ResetPINByOTP().otp("<otp>").pin("<pin>"); //Required
  Boolean xPreventWebhook = true; //Optional
  Boolean preventWebhook = true; //Optional
  String gRecaptchaResponse = "<gRecaptchaResponse>"; //Optional
  String gRecaptchaResponse2 = "<gRecaptchaResponse2>"; //Optional
  String qqCaptchaTicket = "<qqCaptchaTicket>"; //Required
  String qqCaptchaRandstr = "<qqCaptchaRandstr>"; //Required
  String hCaptchaResponse = "<hCaptchaResponse>"; //Optional

  try {
    var response = client.security.resetPinByOTP(type, resetPINByOTP, xPreventWebhook, preventWebhook, gRecaptchaResponse, gRecaptchaResponse2, qqCaptchaTicket, qqCaptchaRandstr, hCaptchaResponse);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
type	path	string	yes	The method of ReAuth MFA verification to use.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
g-recaptcha-response	query	string	no	Google reCAPTCHA response parameter which will be sent to the server for verification.
g_recaptcha_response	query	string	no	Google reCAPTCHA Response
qq_captcha_ticket	query	string	no	QQ Captcha ticket (required if Bot Protection is enabled)
qq_captcha_randstr	query	string	no	QQ Captcha rand string (required if Bot Protection is enabled)
h-captcha-response	query	string	no	hCaptcha Response

Request body

ResetPINByOTP as application/json.

Returns

IsPostedResponse

---

resetPinByResetToken

PUT /identity/v2/auth/pin/reset/token

Reset PIN with Reset Token

Allows a User to reset their PIN by providing a reset token received via Email and a new PIN, enabling secure PIN recovery when the User forgets their PIN.

Example

public static void callResetPinByResetToken(LoginRadiusClient client) {
  ResetPINByToken resetPINByToken = new ResetPINByToken().resettoken("<resettoken>").pin("<pin>"); //Required
  Boolean xPreventWebhook = true; //Optional
  Boolean preventWebhook = true; //Optional

  try {
    var response = client.security.resetPinByResetToken(resetPINByToken, xPreventWebhook, preventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.

Request body

ResetPINByToken as application/json.

Returns

IsPostedResponse

---

sendEmailOtpForReauthMFA

GET /identity/v2/auth/account/reauth/2fa/email

Send Email OTP

Sends a One-Time Password (OTP) to the User's Email for re-authentication.

Example

public static void callSendEmailOtpForReauthMFA(LoginRadiusClient client) {
  String emailid = "<emailid>"; //Optional
  String emailtemplate = "<emailtemplate>"; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.sendEmailOtpForReauthMFA(emailid, emailtemplate, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
emailid	query	string (email)	no	The Email address of User
emailtemplate	query	string	no	Name of the Email template to use for this notification.
access_token	query	string	no	Access Token of the User

Returns

IsPostedResponse

---

sendReAuthEmailOtp

GET /identity/v2/auth/account/reauth/otp/email

Send Email OTP

Sends a One-Time Password (OTP) to the User's Email for re-authentication.

Example

public static void callSendReAuthEmailOtp(LoginRadiusClient client) {
  String emailid = "<emailid>"; //Optional
  String emailtemplate = "<emailtemplate>"; //Optional
  String accessToken = "<accessToken>"; //Optional

  try {
    var response = client.security.sendReAuthEmailOtp(emailid, emailtemplate, accessToken);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
emailid	query	string (email)	no	The Email address of User
emailtemplate	query	string	no	Name of the Email template to use for this notification.
access_token	query	string	no	Access Token of the User

Returns

IsPostedResponse

---

setPinByPinAuthToken

POST /identity/v2/auth/pin/set/pinauthtoken

Set PIN with Authentication Token

Sets a PIN for Users logging in or registering for the first time. Requires a valid PIN authentication token and is typically part of the onboarding or initial setup process.

Example

public static void callSetPinByPinAuthToken(LoginRadiusClient client) {
  String pinauthtoken = new String(); //Required
  PINModel piNModel = "<piNModel>"; //Required
  Boolean xPreventWebhook = true; //Optional
  Boolean preventWebhook = true; //Optional

  try {
    var response = client.security.setPinByPinAuthToken(pinauthtoken, piNModel, xPreventWebhook, preventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
pinauthtoken	query	string	yes	Pin auth token to set the PIN on account
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.

Request body

PINModel as application/json.

Returns

AuthResponse

---

validateEmailOtpForReauth

PUT /identity/v2/auth/account/reauth/otp/email

Verify Email OTP

Validates the One-Time Password (OTP) sent to the User's Email during re-authentication.

Example

public static void callValidateEmailOtpForReauth(LoginRadiusClient client) {
  ReAuthModelByEmailOtp reAuthModelByEmailOtp = new ReAuthModelByEmailOtp().emailid("<emailid>").otp("<otp>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.validateEmailOtpForReauth(reAuthModelByEmailOtp, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

ReAuthModelByEmailOtp as application/json.

Returns

ReAuthResponse

---

validateEmailOtpForReauthMFA

PUT /identity/v2/auth/account/reauth/2fa/otp/email/verify

Verify Email OTP

Verifies the User with Email OTP and Access Token, typically used when re-authentication via Email OTP is required.

Example

public static void callValidateEmailOtpForReauthMFA(LoginRadiusClient client) {
  ReAuthModelByEmailOtp reAuthModelByEmailOtp = new ReAuthModelByEmailOtp().emailid("<emailid>").otp("<otp>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.validateEmailOtpForReauthMFA(reAuthModelByEmailOtp, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

ReAuthModelByEmailOtp as application/json.

Returns

ReAuthResponse

---

validateMfaOTPByEmail

PUT /identity/v2/auth/login/2fa/email

Verify Email OTP with MFA Token

Logs in to a User's account during the second MFA step with an OTP sent to the Email.

Example

public static void callValidateMfaOTPByEmail(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  ReAuthModelByEmailOtp reAuthModelByEmailOtp = new ReAuthModelByEmailOtp().emailid("<emailid>").otp("<otp>"); //Required
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.validateMfaOTPByEmail(secondfactorauthenticationtoken, reAuthModelByEmailOtp, rbabrowseremailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

ReAuthModelByEmailOtp as application/json.

Returns

AuthResponse

---

validateMfaOTPByPhone

PUT /identity/v2/auth/login/2fa/sms

Verify SMS OTP

Allows Users to log in with Multi-Factor Authentication using the OTP sent via SMS or Voice OTP.

Example

public static void callValidateMfaOTPByPhone(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = new String(); //Required
  MFAVerifyPhoneOtpModel mfAVerifyPhoneOtpModel = "<mfAVerifyPhoneOtpModel>"; //Required
  String smstemplate2fa = "<smstemplate2fa>"; //Optional
  String fields = "<fields>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  Boolean isvoiceotp = true; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbaotpsmstemplate = "<rbaotpsmstemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.validateMfaOTPByPhone(secondfactorauthenticationtoken, mfAVerifyPhoneOtpModel, smstemplate2fa, fields, preventWebhook, xPreventWebhook, isvoiceotp, rbabrowseremailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbaotpsmstemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
smstemplate2fa	query	string	no	SMS template name to be used for sending the 2FA code to the User.
fields	query	string	no	Comma-separated list of profile fields to include in the response.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
isvoiceotp	query	boolean	no	Boolean flag to enforce sending SMS content via Voice.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbaotpsmstemplate	query	string	no	RBA OTP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

MFAVerifyPhoneOtpModel as application/json.

Returns

AuthResponse

---

validateReauthMFA

PUT /identity/v2/auth/account/reauth/2fa/{type}

Verify backup code or OTP

Validates the triggered MFA authentication flow using a backup code, OTP, or authenticator code.

Example

public static void callValidateReauthMFA(LoginRadiusClient client) {
  String type = "<type>"; //Required
  ReAuthTwoFAModel reAuthTwoFAModel = new ReAuthTwoFAModel().g-recaptcha-response("<g-recaptcha-response>").qq_captcha_ticket("<qq_captcha_ticket>").qq_captcha_randstr("<qq_captcha_randstr>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String gRecaptchaResponse = "<gRecaptchaResponse>"; //Optional
  String gRecaptchaResponse2 = "<gRecaptchaResponse2>"; //Optional
  String qqCaptchaTicket = "<qqCaptchaTicket>"; //Optional
  String qqCaptchaRandstr = "<qqCaptchaRandstr>"; //Optional
  String hCaptchaResponse = "<hCaptchaResponse>"; //Optional

  try {
    var response = client.security.validateReauthMFA(type, reAuthTwoFAModel, accessToken, preventWebhook, xPreventWebhook, gRecaptchaResponse, gRecaptchaResponse2, qqCaptchaTicket, qqCaptchaRandstr, hCaptchaResponse);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
type	path	string	yes	The method of ReAuth MFA verification to use.
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
g-recaptcha-response	query	string	no	Google reCAPTCHA response parameter which will be sent to the server for verification.
g_recaptcha_response	query	string	no	Google reCAPTCHA Response
qq_captcha_ticket	query	string	no	QQ reCAPTCHA Response
qq_captcha_randstr	query	string	no	QQ reCAPTCHA Response
h-captcha-response	query	string	no	hCaptcha Response

Request body

ReAuthTwoFAModel as application/json.

Returns

ReAuthResponse

---

validateSecurityQuestionReauthMFA

POST /identity/v2/auth/account/reauth/2fa/securityquestionanswer/verify

Verify security question answer

Validates the triggered MFA authentication flow using a security question answer.

Example

public static void callValidateSecurityQuestionReauthMFA(LoginRadiusClient client) {
  TwoFAAuthBySecQuesAuthModel twoFAAuthBySecQuesAuthModel = new TwoFAAuthBySecQuesAuthModel().securityquestionanswer("<securityquestionanswer>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.validateSecurityQuestionReauthMFA(twoFAAuthBySecQuesAuthModel, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

TwoFAAuthBySecQuesAuthModel as application/json.

Returns

ReAuthResponse

---

verify2faTOTPAuth

PUT /identity/v2/auth/account/2fa/totp

Verify TOTP code

Validates an Authenticator Code as part of the MFA process.

Example

public static void callVerify2faTOTPAuth(LoginRadiusClient client) {
  AuthenticatorCodeRequest authenticatorCodeRequest = new AuthenticatorCodeRequest().googleauthenticatorcode("<googleauthenticatorcode>").authenticatorcode("<authenticatorcode>"); //Required
  String accessToken = "<accessToken>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.verify2faTOTPAuth(authenticatorCodeRequest, accessToken, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
access_token	query	string	no	Access Token of the User
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

AuthenticatorCodeRequest as application/json.

Returns

IdentityResponseWithSocialWithoutLogins

---

verifyBackupCodeForMFALogin

PUT /identity/v2/auth/login/2fa/backupcode

Verify Backup Code with MFA Token

Verifies a User's MFA backup code as a second factor during the login process, typically used when the primary MFA method is unavailable.

Example

public static void callVerifyBackupCodeForMFALogin(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  TwoFAAuthByBackupCode twoFAAuthByBackupCode = new TwoFAAuthByBackupCode().backupcode("<backupcode>"); //Required
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional

  try {
    var response = client.security.verifyBackupCodeForMFALogin(secondfactorauthenticationtoken, twoFAAuthByBackupCode, preventWebhook, xPreventWebhook, rbabrowseremailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.

Request body

TwoFAAuthByBackupCode as application/json.

Returns

AuthResponse

---

verifyTotpByMfaToken

PUT /identity/v2/auth/login/2fa/totp

Verify TOTP Code with MFA Token

Validates the TOTP Authenticator code provided by the User as part of the Multi-Factor Authentication login process.

Example

public static void callVerifyTotpByMfaToken(LoginRadiusClient client) {
  String secondfactorauthenticationtoken = "<secondfactorauthenticationtoken>"; //Required
  AuthenticatorCodeRequest authenticatorCodeRequest = new AuthenticatorCodeRequest().googleauthenticatorcode("<googleauthenticatorcode>").authenticatorcode("<authenticatorcode>"); //Required
  String fields = "<fields>"; //Optional
  String rbabrowseremailtemplate = "<rbabrowseremailtemplate>"; //Optional
  String rbacityemailtemplate = "<rbacityemailtemplate>"; //Optional
  String rbacountryemailtemplate = "<rbacountryemailtemplate>"; //Optional
  String rbaipemailtemplate = "<rbaipemailtemplate>"; //Optional
  String rbadeviceemailtemplate = "<rbadeviceemailtemplate>"; //Optional
  String rbabrowsersmstemplate = "<rbabrowsersmstemplate>"; //Optional
  String rbacitysmstemplate = "<rbacitysmstemplate>"; //Optional
  String rbacountrysmstemplate = "<rbacountrysmstemplate>"; //Optional
  String rbaipsmstemplate = "<rbaipsmstemplate>"; //Optional
  String rbadevicesmstemplate = "<rbadevicesmstemplate>"; //Optional
  Boolean preventWebhook = true; //Optional
  Boolean xPreventWebhook = true; //Optional

  try {
    var response = client.security.verifyTotpByMfaToken(secondfactorauthenticationtoken, authenticatorCodeRequest, fields, rbabrowseremailtemplate, rbacityemailtemplate, rbacountryemailtemplate, rbaipemailtemplate, rbadeviceemailtemplate, rbabrowsersmstemplate, rbacitysmstemplate, rbacountrysmstemplate, rbaipsmstemplate, rbadevicesmstemplate, preventWebhook, xPreventWebhook);
    System.out.println(response);
  } catch (ApiException e) {
    LoginRadiusException lr = LoginRadiusClient.toLoginRadiusException(e);
    System.err.println(lr.description());
  }
}

Parameters

Name	In	Type	Required	Description
secondfactorauthenticationtoken	query	string	yes	Second factor token
fields	query	string	no	Comma-separated list of profile fields to include in the response.
rbabrowseremailtemplate	query	string	no	RBA browser Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with browser option is enabled for the Tenant.
rbacityemailtemplate	query	string	no	RBA city Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with city option is enabled for the Tenant.
rbacountryemailtemplate	query	string	no	RBA country Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with country option is enabled for the Tenant.
rbaipemailtemplate	query	string	no	RBA IP Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with IP option is enabled for the Tenant.
rbadeviceemailtemplate	query	string	no	RBA device Email template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when RBA with device option is enabled for the Tenant.
rbabrowsersmstemplate	query	string	no	RBA browser SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacitysmstemplate	query	string	no	RBA city SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbacountrysmstemplate	query	string	no	RBA country SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbaipsmstemplate	query	string	no	RBA IP SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
rbadevicesmstemplate	query	string	no	RBA device SMS template name which will be sent to the User when any risk is detected while logging in to the Tenant. It will only be used when a User has logged in via Phone.
prevent_webhook	query	boolean	no	When true, suppresses webhook events for this operation.
X-PreventWebhook	header	boolean	no	When true, suppresses webhook events for this operation.

Request body

AuthenticatorCodeRequest as application/json.

Returns

AuthResponse