Skip to main content
Version: Latest (4.0.3)

List configured verification methods (user)

GET 
/verification-actions-srv/users/configurations

Returns the signed-in user's enrolled verification methods for a profile / self-service UI.

Use this response to render the list and to obtain ids for delete:

  • TOTP: { "type": "TOTP" } — no id. Remove with DELETE …/users/configurations/TOTP.
  • SMS / EMAIL: mediums[].id is the identity id. Call two APIs: (1) clear or unverify email/mobile on the user, (2) DELETE …/users/configurations/EMAIL or …/SMS.
  • FIDO2: one mediums[] item per passkey. Pass mediums[].id (same as device_id) to DELETE …/users/configurations/devices/FIDO2/{id}.
  • PATTERN / PUSH / TOUCHID / FACE: one mediums[] item per device. Pass mediums[].device_id to DELETE …/users/configurations/devices/{method}/{device_id}.

sub is taken from the access token. An M2M / client-credentials token has no user sub and fails with VER_0067. For another user, use GET /verification-actions-srv/configurations/{sub} with an admin token.

Deprecated equivalent: POST /verification-srv/v2/setup/users/configured/list.

Responses​

Configured methods for the token subject