Credential Issue

Issue a controlled recovery action. Tenant-scoped authority requires an active target membership; null or omitted tenant_id requires global authority. initial_login rejects any existing password; reset_password closes all logins immediately and leaves MFA and backup codes unchanged. replace_factor requires an active factor owned by the person. Links are delivered only through Messaging, never returned to the management caller. Same request_ref with different parameters conflicts.

POST https://id.test.globalbes.sg:9443/internal/control/v1/credentials/recoveries

Called byBOSSTenant admin AuthService certificate+ signed-in user (optional)

Act as the signed-in user (sign in first)

Headers

X-BES-Operator

uuid

Optional acting person named by a service that authenticated them; when a user token is sent it must name the same person.

Body

person_id*

uuid

tenant_id

uuid

reason*

string

request_ref*

string

purpose*

enum

old_factor_id

uuid

Request preview

POST /internal/control/v1/credentials/recoveries

Response

Choose an API and send a request.

Caller tags:BOSSTenant adminAll productsMobile appMessagingControlAIAssistantPlatform opsLegacy productsCI release