Skip to main content
Question

Is there an API to programmatically get MFA information from users?

  • May 27, 2025
  • 1 reply
  • 9 views

Forum|alt.badge.img

Hello all! Hope you're doing well.

We are trying to get information about if an user has enabled MFA on their profile. The best we could get is `is_exempt_from_login_verification` from the users API (https://developer.box.com/reference/resources/user--full/#param-is_exempt_from_login_verification) but as far as I understand, this field says if a user SHOULD enable or not.

In my previous post (https://support.box.com/hc/en-us/community/posts/35068963234323-How-to-get-MFA-information-from-users?page=1#community_comment_35086802191635) I got a response saying that MFA enabled or not should be present in the user activity report.

Is there an API that can retrieve this information?

1 reply

Forum|alt.badge.img
  • Author
  • Box Employee
  • 34740 replies
  • May 27, 2025

Hi Vlad, 

Welcome to Box Community!

The only API to get the information for users who have enabled the 2FA/MFA is via the GET user endpoint

If I may suggest, it would be best that you run a User Activity Report for "Login" and select the option "Login Verification enabled". This report will be able to capture users who have enabled authentication for their account in account settings. 

I hope this answers your question. Thank you for posting!