Hey everyone! Is there a way to reset 2FA for the user (for example, if their device was lost or stolen)? I tried making request to

/admin/identities/{id}

with the following payload:

[
    {
        "op": "remove",
        "path": "/credentials/lookup_secret"
    },
    {
        "op": "remove",
        "path": "/credentials/totp"
    }
]

But it just responds with 400 Bad Request, saying there is no such path in the document (but I can see there is). Is there any solution for this?

We have a PR open for that specific use-case: https://github.com/ory/kratos/pull/2962 Until then, there is no way to do that, unfortunately.

Thanks, subscribed!