---
title: "Initiate MFA enrollment"
method: POST
path: "/current-identity/mfa"
tags: ["Current Identity", "MFA"]
---

# Initiate MFA enrollment

`POST /current-identity/mfa`

Allows authenticator based MFA enrollment. If enrollment has already been completed, it must be disabled before attempting to re-enroll. Subsequent enrollment request is completed via `POST /current-identity/mfa/verify`

## Response `201`

The create request was successful and the resource has been added at the following location

- CreateEnvelope
  - `data` CreateLocation
    - `_links` object — A map of named links
    - `id` string
  - `meta` Meta
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `401` — The supplied session does not have the correct access rights to request this resource
- `409` — The identity is already enrolled in MFA

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/revisions/25da9a73a095/schema)