Authenticator Groups

The Authenticator Groups API provides operations to manage groups of authenticators. This functionality is available as an Early Access (EA) feature for Identity Engine orgs. To use it, enable the Authenticator enrollment sets self-service feature. See Self-service features.

An authenticator enrollment policy references a group to determine which authenticators users must enroll and which ones are optional for enrollment. For example, a policy can require users to enroll two of the three authenticators in a group.

See Authenticator groups.

Note: In the Admin Console, an authenticator enrollment set is an authenticator group with a required-count, grace period, or promotion setting that's applied to it by an authenticator enrollment policy. On its own, an authenticator group has no enrollment behavior. It becomes part of an enrollment requirement only when an authenticator enrollment policy references it and applies enrollment settings. See Authenticator enrollment policies.