TwoFactorInfo

Stores a user’s secret for multi-factor operations. Use this object when customizing multi-factor authentication in your organization. (Note that multi-factor authentication was formerly called two-factor authentication.)

Introduced in API version 32.0.

create(), delete(), describeSObjects(), query(), retrieve(), update(), upsert()

• You need the Manage Multi-Factor Authentication in API permission to create or update this object.

• Type: string

• Properties: Create, Group, Sort, Update

• Description:

  This field is never read-enabled, though it is write-enabled. A request for this value always returns null. The value must be a base32-encoded string of a 20-byte secret.

  You can use the Apex method Auth.SessionManagement.getQrCode() to get a value to write to this field.

  If you write a secret to this field, in API version 37.0 and later the user gets an email notification that a new identity verification method was added to the user’s account.

• Type: picklist
• Properties: Create, Filter, Group, Restricted picklist, Sort, Update
• Description: The multi-factor method.
• Possible values:
  • TOTP — TOTP — The time-based one-time password.

• Type: reference
• Properties: Create, Filter, Group, Nillable, Sort, Update
• Description: The ID for the user who’s associated with the authentication secret.
• Relationship name: User
• Relationship type: relationship
• Refers to: User