Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Identity Hub
  • Access management
  • Pricing policy
  • Terraform reference
    • Authentication
      • Overview
        • Overview
        • Create
        • Update
        • Activate
        • Deactivate
        • Delete
        • Get
        • List
        • UpdateAudience
        • ListAudience
  • Audit Trails events
  • Release notes

In this article:

  • HTTP request
  • Query parameters
  • Response
  • MfaEnforcement
  1. API reference
  2. REST
  3. MfaEnforcement
  4. List

Identity Hub API, REST: MfaEnforcement.List

Written by
Yandex Cloud
Updated at December 15, 2025
  • HTTP request
  • Query parameters
  • Response
  • MfaEnforcement

returns MFA enforcements for the specified organization

HTTP requestHTTP request

GET https://organization-manager.api.cloud.yandex.net/organization-manager/v1/mfaEnforcements

Query parametersQuery parameters

Field

Description

organizationId

string

Required field. organization id

The maximum string length in characters is 50.

pageSize

string (int64)

the maximum number of results per page to return

Acceptable values are 0 to 1000, inclusive.

pageToken

string

page token

The maximum string length in characters is 2000.

ResponseResponse

HTTP Code: 200 - OK

{
  "mfaEnforcements": [
    {
      "id": "string",
      "organizationId": "string",
      "acrId": "string",
      "ttl": "string",
      "status": "string",
      "applyAt": "string",
      "enrollWindow": "string",
      "name": "string",
      "description": "string",
      "createdAt": "string"
    }
  ],
  "nextPageToken": "string"
}

Field

Description

mfaEnforcements[]

MfaEnforcement

list of MFA enforcements for the specified organization

nextPageToken

string

token to get the next page of results

MfaEnforcementMfaEnforcement

MFA enforcement resource

Field

Description

id

string

id of the MFA enforcement

organizationId

string

organization id of the MFA enforcement

acrId

string

acr id of the MFA enforcement

ttl

string (duration)

the period during which the entered MFA factor is considered valid and the
corresponding acr is regarded as satisfied

status

enum (MfaEnforcementStatus)

MFA enforcement status

  • MFA_ENFORCEMENT_STATUS_ACTIVE
  • MFA_ENFORCEMENT_STATUS_INACTIVE
  • MFA_ENFORCEMENT_STATUS_DELETING

applyAt

string (date-time)

the MFA enforcement application start time.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

enrollWindow

string (duration)

the time window during which the user is allowed to create an MFA profile.
this window is measured relative to the MFA enforcement application start time
and the user's most recent successful authentication that falls under the rule
(or the user's creation time, if there has been no authentication).

name

string

name of the MFA enforcement

description

string

description of the MFA enforcement

createdAt

string (date-time)

creation timestamp

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

Was the article helpful?

Previous
Get
Next
UpdateAudience
© 2025 Direct Cursus Technology L.L.C.