# Update user logto config **PATCH /api/users/{userId}/logto-configs** Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional — only provided fields will be updated. ## Servers - Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.) ## Authentication methods - O auth2 ## Parameters ### Path parameters - **userId** (string) The unique identifier of the user. ### Body: application/json (object) - **mfa** (object) - **passkeySignIn** (object) ## Responses ### 200 The exposed logto config fields were updated successfully. #### Body: application/json (object) - **mfa** (object) - **passkeySignIn** (object) ### 400 Bad Request ### 401 Unauthorized ### 403 Forbidden ### 404 Not Found [Powered by Bump.sh](https://bump.sh)