# Organization membership

An organization membership is a top-level resource that represents a [user](/reference/authkit/user)’s relationship with an [organization](/reference/organization). A user may be a member of zero, one, or many organizations.

See the [events reference](/events/organization-membership) documentation for the organization membership events.

### get

## Get an organization membership

Get the details of an existing organization membership.

### delete

## Delete an organization membership

Permanently deletes an existing organization membership. It cannot be undone.

### deactivate

## Deactivate an organization membership

Deactivates an `active` organization membership. Emits an [organization_membership.updated](/events/organization-membership) event upon successful deactivation.

- Deactivating an `inactive` membership is a no-op and does not emit an event.
- Deactivating a `pending` membership returns an error. This membership should be [deleted](/reference/authkit/organization-membership/delete) instead.

See the [membership management documentation](/authkit/users-organizations/organizations/membership-management) for additional details.

### create

## Create an organization membership

Creates a new `active` organization membership for the given organization and user.

Calling this API with an organization and user that match an `inactive` organization membership will activate the membership with the specified role(s).

### list-auth-factors

## List authentication factors

Lists the authentication factors for a user.

### mfa



### enroll-auth-factor

## Enroll an authentication factor

Enrolls a user in a new authentication factor.

### authentication-factor

## Authentication factor

Represents an authentication factor.

### authentication-challenge

## Authentication challenge

Represents a challenge of an authentication factor.

### Magic Auth

---