- Auth
- Application Content
- Businesses
- Overview
- Business Users
- Overview
- List business users by business
- List a business's users
- Create a business user
- Get a business user
- Update a business user
- Upload a business user's avatar
- Delete a business user's avatar
- Deactivate business users
- Search business users
- Search a business's users
- Send a password reset email to a business user
- Reset a business user's daily sign-in code limits
- Toggle a business user's two-factor authentication
- Import business users from CSV
- Export all business users
- Set whether I receive releases
- Set whether I receive alerts
- Request the deletion of my account
- Business Roles
- Business Permissions
- Business Consoles
- Business Devices
- Business Racks
- Business Locations
- Business Reports
- List businesses
- Search businesses
- Search businesses by name or extra data
- Export businesses
- Get a business
- Create a business
- Import businesses from CSV
- Update a business
- Delete a business
- Banned Devices
- Data Centers
- Intake Forms
- List intake form reponses
- Get an intake form's response
- Get an intake form's response license file
- Get an intake form's response identification file
- Download intake form responses report
- Create an intake form's response
- Upload a license file to an intake form's response
- Upload an identification file to an intake form's response
- Update an intake form's response
- Delete an intake form's response
- Users
- Overview
- Permissions
- Roles
- User Groups
- List KIO users
- Create a KIO user
- Get a KIO user
- Update a KIO user
- Activate or deactivate a KIO user
- Delete a KIO user
- Generate a session token for a user
- Export KIO users
- Search active KIO users by name
- Search KIO users
- Look up an employee in SuccessFactors
- Import KIO user updates from CSV
- External Users
- Send App NotificationPOST
- Events LocationsGET
- Fetch WiresGET
- Create Business Temporary SecretPOST
- Schemas
Two-Factor Challenge
POST /v1/auth/login (HTTP 202) when the user's 2FA grace period has ended. A code was emailed to the user; finish signing in with POST /v1/auth/confirm-login-2fa.{
"two_fa_required": true,
"two_fa_session_id": "3F9A1C",
"message": "A two-factor authentication code has been sent to your email. Use it with POST /v1/auth/confirm-login-2fa",
"email": "ana.lopez@example.com",
"grace_days_config": 30
}