I’m using Auth0 to authenticate my users. MFA is a cool feature but a lot of users are complaining about it (boring to download the application, do not have a smartphone, etc).
Is it possible to enable the MFA only for specific areas of the website?
For example:
-
https://www.example.com
(all pages): standard login without MFA -
https://www.example.com/highly_secured_area/*
: ask (only) the MFA when the logged user try to access this page