# Set authenticated user (deprecated)

Sets the user context for a client action reported to the SDK. It should be set only after you've fully authenticated the user (including, for example, any 2FA that was required). This call is **deprecated**, set the user with [Report action result API](/openapi/risk/client-actions.openapi/other/reportactionresult).

Endpoint: POST /action/authenticated-user
Security: risk_access_token

## Request fields (application/json):

  - `user_id` (string, required)
    Opaque identifier of the user in your system.

  - `action_token` (string, required)
    The token return by the SDK when the action was reported.