Activate MFA on specific pages

I’m using Auth0 to authenticate my users. MFA is a cool feature but a lot of users are complaining about it (boring to download the application, do not have a smartphone, etc).

Is it possible to enable the MFA only for specific areas of the website?

For example:

  • https://www.example.com (all pages): standard login without MFA
  • https://www.example.com/highly_secured_area/*: ask (only) the MFA when the logged user try to access this page

Yes, it’s possible to achieve what you mention. Check the available documentation for step up authentication, in particular, the following tutorial:

Step-Up Authentication with Custom Multifactor Authentication Rules

Thanks @jmangelo ! Perfect :slight_smile:

Thanks @jmangelo ! Perfect :slight_smile: