Bulk Invalidate All Remembered Browsers for Multi-Factor Authentication

Overview

This article goes into more detail on how to bulk invalidate all remembered browsers for multi-factor authentication.

Applies To

  • Multi-Factor Authentication
  • Rate limit

Solution

The POST /api/v2/users/{id}/multifactor/actions/invalidate-remember-browser Management API endpoint can invalidate all remembered browsers across all authentication factors for a user.

However, it is not possible to bulk invalidate the user’s remember browser option. This must be performed for each user using the POST /api/v2/users/{id}/multifactor/actions/invalidate-remember-browser endpoint.

This method needs to loop through all user_ids. When making a series of requests for all users, please stay within the rate limits for the Management APIv2.

Related References