Go to developer

not_enrolled

No active KEYRA identity for this user — cannot start a challenge.

On this page
HTTP 404enrollmentpartner-2faapitypescriptjava

Code: not_enrolled · Shape: partner

Meaning

No active KEYRA identity for this user — cannot start a challenge.

Likely causes

  1. User never completed enrollment
  2. Identity disabled/revoked
  3. Different externalUserId or project than enrollment

How to diagnose

  • Call get2FAStatus.
  • Confirm the same projectId + externalUserId used at enroll.

How to fix

  • Run enable2FA / enrollment to completion.
  • Re-enroll after disable.

Retry behavior

Do not retry createChallenge until enrolled.

API: POST /v1/auth/challenge, POST /v1/identities/status

SDK: startAuthentication(), get2FAStatus(), enable2FA()

Troubleshooting: partner-2fa

Guides: Enrollment, Authentication