diff --git a/packages/clients/src/api/iam/v1alpha1/api.gen.ts b/packages/clients/src/api/iam/v1alpha1/api.gen.ts
index 272903847..11dc27c5c 100644
--- a/packages/clients/src/api/iam/v1alpha1/api.gen.ts
+++ b/packages/clients/src/api/iam/v1alpha1/api.gen.ts
@@ -228,6 +228,7 @@ export class API extends ParentAPI {
         method: 'GET',
         path: `/iam/v1alpha1/users`,
         urlParams: urlParams(
+          ['mfa', request.mfa],
           ['order_by', request.orderBy ?? 'created_at_asc'],
           [
             'organization_id',
@@ -261,8 +262,7 @@ export class API extends ParentAPI {
   /**
    * Get a given user. Retrieve information about a user, specified by the
    * `user_id` parameter. The user's full details, including `id`, `email`,
-   * `organization_id`, `status` and `two_factor_enabled` are returned in the
-   * response.
+   * `organization_id`, `status` and `mfa` are returned in the response.
    *
    * @param request - The request {@link GetUserRequest}
    * @returns A Promise of User
diff --git a/packages/clients/src/api/iam/v1alpha1/marshalling.gen.ts b/packages/clients/src/api/iam/v1alpha1/marshalling.gen.ts
index 4bc09df5f..d0fa9083f 100644
--- a/packages/clients/src/api/iam/v1alpha1/marshalling.gen.ts
+++ b/packages/clients/src/api/iam/v1alpha1/marshalling.gen.ts
@@ -231,6 +231,7 @@ export const unmarshalUser = (data: unknown) => {
     email: data.email,
     id: data.id,
     lastLoginAt: unmarshalDate(data.last_login_at),
+    mfa: data.mfa,
     organizationId: data.organization_id,
     status: data.status,
     twoFactorEnabled: data.two_factor_enabled,
diff --git a/packages/clients/src/api/iam/v1alpha1/types.gen.ts b/packages/clients/src/api/iam/v1alpha1/types.gen.ts
index c5282639a..1cb147997 100644
--- a/packages/clients/src/api/iam/v1alpha1/types.gen.ts
+++ b/packages/clients/src/api/iam/v1alpha1/types.gen.ts
@@ -429,10 +429,12 @@ export interface User {
   lastLoginAt?: Date
   /** Type of user. */
   type: UserType
-  /** Whether MFA is enabled. */
-  twoFactorEnabled: boolean
+  /** @deprecated Deprecated, use "mfa" instead. */
+  twoFactorEnabled?: boolean
   /** Status of user invitation. */
   status: UserStatus
+  /** Whether MFA is enabled. */
+  mfa: boolean
 }
 
 export type ListSSHKeysRequest = {
@@ -492,6 +494,8 @@ export type ListUsersRequest = {
   organizationId?: string
   /** Filter by list of IDs. */
   userIds?: string[]
+  /** Filter by MFA status. */
+  mfa?: boolean
 }
 
 export type GetUserRequest = {