---
title: "Start Authenticator App Enrollment"
method: POST
path: "/user-authenticators/totp"
tags: ["Authenticator App"]
---

# Start Authenticator App Enrollment

`POST /user-authenticators/totp`

Enroll a new authenticator app authenticator for a user

## Response `200`

OK

- object
  - `userAuthenticatorId` string — The ID of the TOTP authenticator which has been created but not yet verified.
  - `userId` string
  - `uri` string — A URI which can be converted into a QR code and scanned by an authenticator app.
  - `secret` string — A secret which can be manually entered into an authenticator app. Typically presented as a backup option if the user is unable to scan the QR code.

## Other responses

- `400` — Invalid Request
- `401` — Unauthorized
- `404` — Not Found

---

[API](https://skmtc.net/authsignal/apis/call-connect-api.md) · [All operations](https://skmtc.net/authsignal/apis/call-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authsignal/call-connect-api/versions/5604d744e3ad/schema)