= How to remove 2 factor authentication tokens in IPA

== How to remove 2 factor authentication tokens in IPA using UI

. Log into `https://id.fedoraproject.org/ipa/ui/` using FAS credentials

. Click on the `Authentication` tab

. Click on the `OTP Tokens` sub tab

. Enter the username into the search bar. This will display a list of tokens associated with the user.

. Select the desired token and click delete. A popup will appear, click delete again to confirm.

== How to remove 2 factor authentication tokens in IPA using cli

. kinit as user with admin privileges on IPA server

. Run `ipa otptoken-find --owner=<username>`
+
A list of the users OTP tokens will be displayed. Copy `Unique ID` vlaue of the desired token

. Run `ipa otptoken-del <Unique_ID>`
+
The token is now removed

