hf1f0 (hf1f0) asked a question.
Factors API, Status ACTIVE vs ENROLLED
Hi all,
We try to utilize factors API, whose documentation is here, in order we be able to perform the reset of an MFA factor. The whole user journey in our application is the following:
- We check in the enrolled factors for the user that wants to do so, using this API call
- We present the factors the factors that the user is enrolled in a form
- User selects one of the factors via and submits it.
- Then we delete that factor for the user.
It’s not clear the status of a factor returned by the endpoint:
/api/v1/users/**${userId}**/factors
According to the documentation, this endpoint
On the other hand if we see the valid values from the table here
Image is not available
There is a specific status value called ENROLLED.
What’s the difference between ACTIVE and ENROLLED ?
Shouldn’t the API call we perform return only the factors whose status is ENROLLED ?
Thanks.
Hi @hf1f0 (hf1f0) , Thank you for reaching out to the Okta Community!
From what I've been able to dig up , the "ENROLLED" status does not have any public use application and according to the documentation:
All responses return the enrolled Factor with a status of either PENDING_ACTIVATION or ACTIVE.
As far as I can tell, "ENROLLED" would mean that there is an enrollment, but is superseded by "ACTIVE", so for your use case this should not cause any issue.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Join the discussion for the Ask Me Anything online event on May 23, 2024 with Okta Tactical Edge Product Experts