Skip to main content

Reconfirm password to satisfy step-up when no MFA factor is enrolled

POST 
/v1/auth/client/me/password-confirm

Returns a fresh access token with amr += "reauth" so the next destructive request passes RequireStepUp. Refuses with 409 password_confirm_unavailable when the user has any MFA factor or no password.

Request​

Responses​

OK