howtos/clean_2f_tokens.md

How to remove 2 factor authentication tokens in IPA using ui

• log into https://id.fedoraproject.org/ipa/ui/ using noggin credentials

• Click on the Authentication tab

• Click on the OTP Tokens sub tab

• Enter the username into the search bar. This will display a list of tokens associated with the user.

• Select the desired token and click delete. A popup will appear, click delete again to confirm.

How to remove 2 factor authentication tokens in IPA using cli

• kinit as user with admin privileges on ipa server

• Run ipa otptoken-find --owner=<username>

• A list of the users otp tokens will be displayed. Copy Unique ID vlaue of the desired token

• Run ipa otptoken-del <Unique_ID>. The token is now removed