TwoFactorInfo

Stores a user’s secret for multi-factor operations. Use this object when customizing multi-factor authentication in your organization. (Note that multi-factor authentication was formerly called two-factor authentication.) This object is available in API version 32.0 and later.

Supported Calls

create(), delete(), describeSObjects(), query(), retrieve(), update(), upsert()

Special Access Rules

You need the Manage Multi-Factor Authentication in API permission to create or update this object.

Fields

Field Name	Details
SharedKey	Type string Properties Create, Group, Sort, Update Description This field is never read-enabled, though it is write-enabled. A request for this value always returns `null`. The value must be a base32-encoded string of a 20-byte secret. You can use the Apex method `Auth.SessionManagement.getQrCode()` to get a value to write to this field. Note If you write a secret to this field, in API version 37.0 and later the user gets an email notification that a new identity verification method was added to the user’s account.
Type	Type picklist Properties Create, Filter, Group, Restricted picklist, Sort, Update Description The multi-factor method. `TOTP`—The time-based one-time password.
UserId	Type reference Properties Create, Filter, Group, Nillable, Sort, Update Description The ID for the user who’s associated with the authentication secret.