Deactivate 2SV - Crowd

[SRBR SE]

Hello,

How can I as an administrator revogate or remove the 2SV of an user of CROWD (Data Center)?
Some users got stuck in the 2 Step Verification of Crowd, and they lost the emergency key and the tokens (changed the device which the tokens were registered).

Best Regards,

Lucas

[Tomislav Tobijas]

Hi @SRBR SE ,

Try this:

1. Use the REST API as a System Admin:
   Only system admins who have 2SV set up themselves can perform this action.

2. API Endpoint:

   • Method: DELETE

   • URL:

     rest/tsv/latest/totp/unenroll/user/{otherUserName}

     Replace {otherUserName} with the username of the user who needs 2SV removed.

3. Request Details:

   • You must include a valid session cookie (e.g., JSESSIONID).

   • The request body must include your own current TOTP code:

     { "totpCode": "YOUR_6_DIGIT_CODE" }

4. Result:

   • If successful, the user will be unenrolled from 2SV and can log in again without it.

   • If there’s no enrollment for the user, or the user is not found, you’ll receive an error message.

I believe official docs should be here: Manage two-step verification for your Atlassian account / Recovery unenrollment 

I don't have a Crowd instance to try it out now, so it's a bit theoretical from my side atm 👀

Cheers,
Tobi