The POST /environments/{environmentId}/users/{userId}/devices operation creates an MFA device and associates this device with the specified user. The user must have an associated device to complete an MFA authentication action. This sue case defines an SMS device so that the user can receive a one-time passcode by text message.