Required. MFA enrollment id from a current MFA enrollment.
tenantId
string
The ID of the Identity Platform tenant that the user unenrolling MFA belongs to. If not set, the user belongs to the default Identity Platform project.
Response body
Withdraws MultiFactorAuth response.
If successful, the response body contains data with the following structure:
JSON representation
{"idToken":string,"refreshToken":string}
Fields
idToken
string
ID token updated to reflect removal of the second factor.
refreshToken
string
Refresh token updated to reflect removal of the second factor.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-30 UTC."],[[["\u003cp\u003eThis API endpoint revokes a second factor from a user's enrolled multi-factor authentication (MFA) methods.\u003c/p\u003e\n"],["\u003cp\u003eA POST request to \u003ccode\u003ehttps://identitytoolkit.googleapis.com/v2/accounts/mfaEnrollment:withdraw\u003c/code\u003e is required, including the user's ID token and the MFA enrollment ID within the request body.\u003c/p\u003e\n"],["\u003cp\u003eA successful response contains a new ID token and refresh token, reflecting the removal of the specified second factor from the user's account.\u003c/p\u003e\n"],["\u003cp\u003eTo use this API, one of the specified OAuth scopes (\u003ccode\u003ehttps://www.googleapis.com/auth/identitytoolkit\u003c/code\u003e or \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e) must be authorized.\u003c/p\u003e\n"],["\u003cp\u003eThe request body can optionally contain the \u003ccode\u003etenantId\u003c/code\u003e, which is used to identify the Identity Platform tenant that the user unenrolling MFA belongs to, otherwise the user belongs to the default Identity Platform project.\u003c/p\u003e\n"]]],[],null,["# Method: accounts.mfaEnrollment.withdraw\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Request body](#body.request_body)\n - [JSON representation](#body.request_body.SCHEMA_REPRESENTATION)\n- [Response body](#body.response_body)\n - [JSON representation](#body.WithdrawMfaResponse.SCHEMA_REPRESENTATION)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\nRevokes one second factor from the enrolled second factors for an account.\n\n### HTTP request\n\n`POST https://identitytoolkit.googleapis.com/v2/accounts/mfaEnrollment:withdraw`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Request body\n\nThe request body contains data with the following structure:\n\n### Response body\n\nWithdraws MultiFactorAuth response.\n\nIf successful, the response body contains data with the following structure:\n\n### Authorization scopes\n\nRequires one of the following OAuth scopes:\n\n- `https://www.googleapis.com/auth/identitytoolkit`\n- `\n https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
