Hashes of MFA cookies that have been issued. Cookies are only issued if the system setting LoginRequiresEmailVerificationEveryXDays is set.
You can delete rows from this table to invalidate remembered MFA sessions, for example when a device is lost, compromised, or MFA access should be reset.
| Name | Datatype | Read | Write | Primary key | Description |
|---|---|---|---|---|---|
| UserMfaTokenId | int | Yes | No | Yes | Primary key. |
| UserId | int | Yes | No | No | The user the token belongs to. |
| InsertDatetimeUtc | datetime2 | Yes | No | No | When the token was created. |
| ExpiresDatetimeUtc | datetime2 | Yes | No | No | When the token will expire. If the token has expired the user will have to authenticate themselves again. |
| Hash | varbinary(32) | No | No | No | Hash of the user's cookie. |