API referenceAccount
`POST /account/mfa/totp-associations` — begin TOTP enrolment; answers the shared secret. While no factor is recorded it needs the emailed setup token as well as the step-up token — a password alone never enrols a factor.
POST
/account/mfa/totp-associationsRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
The body of the /account/mfa/* calls that carry nothing but the step-up
token. No Debug: a live credential.
Response Body
application/json
curl -X POST "https://example.com/account/mfa/totp-associations" \ -H "Content-Type: application/json" \ -d '{ "access_token": "string" }'{ "secret": "string"}