---
layout: api
page_title: /identity/mfa - HTTP API
description: >-
  The '/identity/mfa' endpoint focuses on managing login MFA behaviors in Vault.
---

# `/identity/mfa`

## Supported MFA types.

- [TOTP](/api/secret/identity/mfa/totp)

- [Okta](/api/secret/identity/mfa/okta)

- [Duo](/api/secret/identity/mfa/duo)

- [PingID](/api/secret/identity/mfa/pingid)

## Other

- [Login Enforcement](/api/secret/identity/mfa/login-enforcement)
- [MFA Validate](/api/system/mfa/validate)

While the above endpoints are available in both the open source and Enterprise versions of Vault,
they are namespace aware. MFA methods and login enforcements created in one namespace are separate from other
namespaces. In the open source version of Vault, everything operates in the root namespace.
