# SecurityEnforcementPostureDto

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

## Fields
- `mfaRequirement` ([MfaRequirement](https://devportal.demo.winkpg.io/docs/api/models/MfaRequirement.md)): Whether a second factor is optional, required or turned off for this account.
  Values:
  - `Optional`: The account holder chooses. This is the platform default.
  - `Required`: A second factor is required and the account holder cannot turn it off.
  - `Disabled`: Two-factor authentication is turned off for the account and cannot be enrolled.
- `mfaRequirementSource` ([MfaRequirementSource](https://devportal.demo.winkpg.io/docs/api/models/MfaRequirementSource.md)): Which switch decided `mfaRequirement`.
  Values:
  - `AccountHolder`: Nothing forces the outcome: the account holder decides.
  - `SubscriptionFeature`: The subscription feature, which a reseller or the platform operator sets and a tenant administrator cannot override.
  - `TenantPolicy`: The tenant's own two-factor setting.
- `usersCanChangeMfa` (boolean): Whether the account holder may turn their own second factor on and off.
- `idleTimeoutMinutes` (integer(int32)): How many minutes of inactivity end the session, from the tenant's idle-circuit setting.
- `preventConcurrentLogin` (boolean): Whether the tenant allows only one concurrent login per account.
- `signInIpRestrictionEnforced` (boolean): Whether interactive portal access is restricted by source address.

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.