> ## Documentation Index > Fetch the complete documentation index at: https://docs.evolutionfoundation.com.br/llms.txt > Use this file to discover all available pages before exploring further. # Update user MFA settings > Update user multi-factor authentication settings ## OpenAPI ````yaml /api-reference/openapi/Evo-Auth-Service/users.yaml patch /api/v1/users/{id}/update_mfa openapi: 3.0.1 info: title: Evolution Foundation - Auth Service - Users description: Authentication and user and account management version: v1.0.0 servers: - url: https://api.evoai.app description: Production server - url: http://localhost:3001 description: Development server variables: port: default: '3001' - url: '{customUrl}' description: Custom server variables: customUrl: default: https://your-instance.com description: Enter your server URL security: [] paths: /api/v1/users/{id}/update_mfa: parameters: - name: id in: path description: User ID required: true schema: type: string format: uuid patch: summary: Update user MFA settings description: Update user multi-factor authentication settings operationId: updateUserMFA parameters: [] requestBody: required: true content: application/json: schema: type: object properties: user: type: object properties: mfa_method: type: string enum: - disabled - totp - email description: MFA method to enable otp_required_for_login: type: boolean description: Whether OTP is required for login required: - mfa_method required: - user responses: '200': description: MFA settings updated successfully content: application/json: schema: $ref: '#/components/schemas/UserDetailResponse' '400': description: Bad Request (invalid data) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: validation_error: summary: Invalid user ID format or missing required fields value: success: false error: code: VALIDATION_ERROR message: Invalid user ID format meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH '401': description: Unauthorized (invalid or missing token) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: invalid_token: summary: Invalid or missing token value: success: false error: code: INVALID_TOKEN message: Invalid token meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH '403': description: Forbidden (insufficient permissions) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: forbidden: summary: Insufficient permissions value: success: false error: code: FORBIDDEN message: You are not authorized to perform this action details: action: users.manage_mfa record: User meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH '404': description: Not Found (user not found) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: user_not_found: summary: User not found value: success: false error: code: RESOURCE_NOT_FOUND message: User not found meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH '422': description: Unprocessable Entity (validation errors) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: validation_failed: summary: MFA settings validation failed value: success: false error: code: VALIDATION_ERROR message: Validation failed details: - field: mfa_method messages: - is not included in the list full_messages: - Mfa method is not included in the list meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH '500': description: Internal Server Error (erro interno do servidor) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: internal_error: summary: Internal server error value: success: false error: code: INTERNAL_ERROR message: An unexpected error occurred meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/users/{id}/update_mfa method: PATCH security: - ApiAccessTokenAuth: [] components: schemas: UserDetailResponse: type: object properties: success: type: boolean example: true data: $ref: '#/components/schemas/User' message: type: string ErrorResponse: type: object required: - success - error - meta properties: success: type: boolean example: false error: type: object required: - code - message properties: code: type: string example: VALIDATION_ERROR message: type: string example: Validation failed details: type: object additionalProperties: true nullable: true meta: type: object required: - timestamp - path - method properties: timestamp: type: string format: date-time example: '2024-01-15T10:30:00Z' path: type: string example: /api/v1/super_admin/accounts/123 method: type: string example: POST User: type: object properties: id: type: string format: uuid name: type: string email: type: string format: email type: type: string enum: - User - SuperAdmin role: type: object nullable: true properties: id: type: string format: uuid key: type: string name: type: string pubsub_token: type: string display_name: type: string nullable: true availability: type: string enum: - online - busy - offline mfa_enabled: type: boolean confirmed: type: boolean custom_attributes: type: object additionalProperties: true ui_settings: type: object additionalProperties: true is_super_admin: type: boolean created_at: type: string format: date-time updated_at: type: string format: date-time securitySchemes: ApiAccessTokenAuth: type: apiKey in: header name: api_access_token description: API access token authentication ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.