Skip to main content
This Process removes a registered third-party authenticator app, from an authenticated user.

​
Process Flow

This flow describes the Process at a high level. Preconditions
  • The user is currently authenticated.
  • The user has registered an RFC-6238-compliant authenticator app to their User ID.
Basic Flow
  1. The user navigates to their profile or security settings (or your client UI equivalent), and selects to remove the authenticator app from their profile.
  2. Storefront Gateway requests the current User’s password, and the UI prompts the end user for that password.
  3. The user provides their password, and the client passes the password back to Storefront Gateway.
  4. Storefront Gateway removes the selected app from the User ID (i.e., from the Storefront Gateway User entity).
Post-conditions
  • The app is no longer an option for the user if they trigger an MFA check during authentication.
Possible or Common Errors
  • The currently authenticated User does not have a registered authenticator app.
  • Invalid password.
  • The user does not currently have a password, and must first set one.

​
Settings

This Process currently has no relevant settings that configure the Process API response or Process logic/behaviour. However, additional settings may be introduced over the course of future releases.

​
User Journey Flow Diagram

This diagram illustrates the standard user journey using the Unregister Authenticator App Process.

​
Use Cases

The following use cases provide guided API walk-throughs of this Process for client developers: Parent topic:Multi-Factor Authentication Management