# User

 - [POST /user-authentication](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/userauthentication.md): Starts User Authentication
 - [POST /user-refresh-tokens](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/refreshusertokens.md): Uses the Refresh Token to obtain new JWT tokens to extend the user's session.
 - [POST /change-temporary-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/userchangetemppassword.md): Changes a User's temporary password.
 - [POST /forgot-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/forgotpassword.md): Begin password recovery flow. Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password.
 - [POST /confirm-forgot-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/confirmforgotpassword.md): Allows a user to enter a confirmation code to reset a forgotten password.
 - [POST /users/{userID}/change-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/userchangepassword.md): User requests to change their password.
 - [POST /users/{userID}/admin-reset-password](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/userresetpassword.md): Admin request to reset a User's password. When an Administrator calls this API, the User's current password is invalidated and must be changed. If a user tries to sign in after the API is called, the
 - [POST /users/{userID}/admin-disable](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/admindisableuser.md): Admin request to disable a User.
 - [POST /users/{userID}/admin-enable](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/adminenableuser.md): Admin request to enable a User.
 - [POST /users/{userID}/resend-confirmation-code](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/adminresendconfirmationcode.md): Resends a User a confirmation code.
 - [POST /users/{userID}/resend-welcome-message](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/adminresendwelcomemesasge.md): Resends the invitation message to a user that already exists and resets the expiration on the user's sign-up window.
 - [POST /mfa-submit-code](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/submitmfacode.md): Submits a multi-factor authentication (MFA) code provided by the user and completes the authentication process.
 - [POST /users](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/createusers.md): Creates a new User
 - [GET /users](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/listusers.md): Lists all Users with an optional filter for login status. Login status values: 1=Logged In, 2=Logged Out, 3=Kicked.
 - [GET /users/{userID}](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/getuser.md): Gets a User by ID
 - [PUT /users/{userID}](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/updateuser.md): Updates a specific User
 - [DELETE /users/{userID}](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/deleteuser.md): Delete a User
 - [PUT /users-batch](https://vbapi-docs.vbasoftware.com/openapi/vbasoftware/vbasoftware.api/user/updatebatchusers.md): Create or Update multiple Users at once. If the entity exists, it will be updated. If the entity does not exist, it will be created.