TOTP

Create

post

Create a new TOTP MFA.

Body

application/json; api-version=1.0

Create MFA of type TOTP

namestring · min: 1 · max: 255 · nullableRequired

The name of the target Multi Factor Authentication. This must be the actual Multi Factor Authentication name used in the RAS farm.

siteIdinteger · int32Optional

Site ID in which to modify the specified Multi Factor Authentication. If the parameter is omitted, the site ID of the Licensing Server will be used.

descriptionstring · nullableOptional

A user-defined Multi Factor Authentication description.

enabledbooleanOptional

Enable or disable the Multi Factor Authentication upon creation. If the parameter is omitted, the Multi Factor Authentication is initialised as Disabled.

displayNamestring · max: 200 · nullableRequired

RADIUS type name.

userEnrollmentstring · enumOptional

User Enrollment

Possible values:

showInformationForUnenrolledUsersstring · enumOptional

Show information for unenrolled users

Possible values:

untilDateTimestring · date-time · nullableOptional

Allow User Enrollment until date/time

toleranceinteger · int32 · nullableOptional

TOTP tolerance in seconds. Accepted values are 0 (None), 30, 60, 90 and 120

userMessagePromptstring · max: 300 · nullableOptional

User message prompt

Responses

201

Created

application/json; api-version=1.0

MFA TOTP Settings

idinteger · int32Optional

ID of the object.

adminCreatestring · nullableOptional

User who created the object.

adminLastModstring · nullableOptional

User who last modified the object.

timeCreatestring · date-timeOptional

Time when the object was created.

timeLastModstring · date-timeOptional

Time when the object was last modified.

namestring · nullableOptional

Name

siteIdinteger · int32Optional

Site ID

descriptionstring · nullableOptional

Description

enabledbooleanOptional

Whether MFA provider is enabled or not.

typestring · enumOptional

Provider Type

Possible values:

inheritDefaultCriteriaSettingsbooleanOptional

If true default criteria restriction settings will be inherited.

displayNamestring · nullableOptional

Authentication method type

userMessagePromptstring · nullableOptional

User message prompt

userEnrollmentstring · enumOptional

User Enrollment

Possible values:

showInformationForUnenrolledUsersstring · enumOptional

Show information for unenrolled users

Possible values:

untilDateTimestring · date-timeOptional

Allow User Enrollment until date/time

toleranceinteger · int32Optional

TOTP tolerance in seconds. Accepted values are 0 (None), 30, 60, 90 and 120

401

Unauthorized

application/json; api-version=1.0

409

Conflict

application/json; api-version=1.0

post

/api/MFA/TOTP

HTTPcURLJavaScriptPython

POST /api/MFA/TOTP HTTP/1.1
Content-Type: application/json; api-version=1.0
Accept: */*
Content-Length: 323

{
  "name": "text",
  "siteId": 1,
  "description": "text",
  "enabled": true,
  "displayName": "text",
  "userEnrollment": [
    "0 = Allow",
    "1 = AllowUntil",
    "2 = DoNotAllow"
  ],
  "showInformationForUnenrolledUsers": [
    "0 = Always",
    "1 = IfEnrollmentIsAllowed",
    "2 = Never"
  ],
  "untilDateTime": "2026-03-13T04:09:07.593Z",
  "tolerance": 1,
  "userMessagePrompt": "text"
}

{
  "id": 1,
  "adminCreate": "text",
  "adminLastMod": "text",
  "timeCreate": "2026-03-13T04:09:07.593Z",
  "timeLastMod": "2026-03-13T04:09:07.593Z",
  "name": "text",
  "siteId": 1,
  "description": "text",
  "enabled": true,
  "type": [
    "1 = Deepnet",
    "2 = SafeNet",
    "3 = Radius",
    "4 = AzureRadius",
    "5 = DuoRadius",
    "6 = FortiRadius",
    "7 = TekRadius",
    "8 = GAuthTOTP",
    "9 = TOTP",
    "10 = MicrosoftTOTP",
    "11 = EmailOTP"
  ],
  "inheritDefaultCriteriaSettings": true,
  "criteria": {
    "securityPrincipals": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "members": [
        {
          "account": "text",
          "type": [
            "1 = User",
            "2 = Group",
            "3 = ForeignSecurityPrincipal",
            "4 = Computer"
          ],
          "sid": "text"
        }
      ]
    },
    "gateways": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "members": [
        {
          "gatewayIP": "text"
        }
      ]
    },
    "oSs": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "allowedOSes": {
        "chrome": true,
        "android": true,
        "webClient": true,
        "iOS": true,
        "linux": true,
        "mac": true,
        "wyse": true,
        "windows": true
      }
    },
    "iPs": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "allowedIPs": {
        "iPv4s": [
          {
            "from": "text",
            "to": "text"
          }
        ],
        "iPv6s": [
          {
            "from": "text",
            "to": "text"
          }
        ]
      }
    },
    "hardwareIDs": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "members": [
        {
          "hardwareID": "text"
        }
      ]
    },
    "access": [
      "0 = DenyCriteriaWhen",
      "1 = AllowCriteriaWhen"
    ],
    "devices": {
      "enabled": true,
      "matchingMode": [
        "0 = IsNotOneOfTheFollowing",
        "1 = IsOneOfTheFollowing"
      ],
      "members": [
        {
          "client": "text"
        }
      ]
    }
  },
  "displayName": "text",
  "userMessagePrompt": "text",
  "userEnrollment": [
    "0 = Allow",
    "1 = AllowUntil",
    "2 = DoNotAllow"
  ],
  "showInformationForUnenrolledUsers": [
    "0 = Always",
    "1 = IfEnrollmentIsAllowed",
    "2 = Never"
  ],
  "untilDateTime": "2026-03-13T04:09:07.593Z",
  "tolerance": 1
}

Update

put

Update the TOTP MFA Site Settings.

Path parameters

idinteger · int32Required

The ID for which to modify the MFA settings.

Body

application/json; api-version=1.0

Update MFA of type TOTP

namestring · min: 1 · max: 255 · nullableOptional

The new name of the target multi-factor authentication .

descriptionstring · nullableOptional

A user-defined multi-factor authentication description.

enabledboolean · nullableOptional

Enable or disable the specified multi-factor authentication in a site.

inheritDefaultCriteriaSettingsboolean · nullableOptional

If true default criteria settings will be inherited.

displayNamestring · max: 200 · nullableOptional

RADIUS type name.

userEnrollmentstring · enumOptional

User Enrollment

Possible values:

showInformationForUnenrolledUsersstring · enumOptional

Show information for unenrolled users

Possible values:

untilDateTimestring · date-time · nullableOptional

Allow User Enrollment until date/time

toleranceinteger · int32 · nullableOptional

TOTP tolerance in seconds. Accepted values are 0 (None), 30, 60, 90 and 120

defaultUserMessagePromptbooleanOptional

If this parameter is included, the message prompt will be replaced with the default message prompt.

Default: false

userMessagePromptstring · max: 300 · nullableOptional

User message prompt

Responses

204

No Content

401

Unauthorized

application/json; api-version=1.0

404

Not Found

application/json; api-version=1.0

put

/api/MFA/TOTP/{id}

HTTPcURLJavaScriptPython

PUT /api/MFA/TOTP/{id} HTTP/1.1
Content-Type: application/json; api-version=1.0
Accept: */*
Content-Length: 383

{
  "name": "text",
  "description": "text",
  "enabled": true,
  "inheritDefaultCriteriaSettings": true,
  "displayName": "text",
  "userEnrollment": [
    "0 = Allow",
    "1 = AllowUntil",
    "2 = DoNotAllow"
  ],
  "showInformationForUnenrolledUsers": [
    "0 = Always",
    "1 = IfEnrollmentIsAllowed",
    "2 = Never"
  ],
  "untilDateTime": "2026-03-13T04:09:07.593Z",
  "tolerance": 1,
  "defaultUserMessagePrompt": false,
  "userMessagePrompt": "text"
}

No content