Is there an API to programmatically get MFA information from users?

Hello all! Hope you're doing well.

We are trying to get information about if an user has enabled MFA on their profile. The best we could get is `is_exempt_from_login_verification` from the users API (https://developer.box.com/reference/resources/user--full/#param-is_exempt_from_login_verification) but as far as I understand, this field says if a user SHOULD enable or not.

In my previous post (https://support.box.com/hc/en-us/community/posts/35068963234323-How-to-get-MFA-information-from-users?page=1#community_comment_35086802191635) I got a response saying that MFA enabled or not should be present in the user activity report.

Is there an API that can retrieve this information?

Ann

November 05, 2024 21:13

Hi Vlad,

Welcome to Box Community!

The only API to get the information for users who have enabled the 2FA/MFA is via the GET user endpoint.

If I may suggest, it would be best that you run a User Activity Report for "Login" and select the option "Login Verification enabled". This report will be able to capture users who have enabled authentication for their account in account settings.

I hope this answers your question. Thank you for posting!

Comments