I want to provide an option for users to manage their MFA enrollments from our own UI, not just during the Universal Login flow. We’re getting a lot of support tickets from users that get confused/stuck by hitting such an unexpected ‘enroll your device’ page. I feel I’m super close to getting it to …

We have created a FAQ related to this topic. Please check it out ~ How to Enroll a User in Both Google Authenticator and SMS with MFA API

Gentle ping from me :ping_pong:

Hi @thijmen96 , I apologize for the delay. Were you able to figure this one out? I can reach out to the team if you still need assistance. Best, Dan

Hi @dan.woda , I’m still stuck on this :sweat_smile:

Finally got some time to go through this whole flow, and after some time with postman I have some ideas. [image] thijmen96: get an access token for the https://{{auth0-domain}}/mfa audience with scopes enroll read:authenticators remove:authenticators when logging in with Universal Login How …

Hi Dan, thank you so much for taking the time to look into this! [image] dan.woda: How is the user logging in here (I think this is the crux of the issue)? We want to use this in a Node.js application, so the user is signed in normally and we specify the MFA API endpoint with the enroll scop…

Thanks for taking the time to describe this further. I am going to reach out to the team and see if I can get a more specific answer for you.

I’ll update here when I hear back from them.

Hey @thijmen96 It’s admittedly confusing, but the “MFA token” can be obtained in two ways: what’s returned as the mfa token along with the mfa_required error in the resource owner password grant flow the access token you obtain with regular /authorize request, with an audience=https://YOUR_AUTH0_…

It works!!1! :partying_face: It was the custom domain gotcha… All MFA API calls also work on custom domains, even with an API audience of {{custom_domain}}/mfa/ (which I’d naively created in my dashboard… Note to self: never try to create an Auth0 API, they’re already there), except for the /oauth/…

Associate MFA factor from own UI: error on factor activation

Get Help

dan.woda July 7, 2020, 3:27pm 12

Thanks for the help @nicolas_sabena. Let us know if you have any other questions!

Error while confirming MFA SMS enrollment

Topic		Replies	Views
How to get MFA API Access Tokens? Get Help mfa , mfa-api	3	6137	February 28, 2023
How to build custom MFA pages Get Help mfa , mfa-api	6	2386	April 27, 2023
Error while confirming MFA SMS enrollment Get Help mfa , phone-factor	0	745	September 22, 2023
Mfa association mfa-api with access token vs mfa token approach Get Help mfa , mfa-api	4	605	July 11, 2024
Skip MFA enrollment page in classic universal login Get Help management-api , users	4	883	November 9, 2023

Associate MFA factor from own UI: error on factor activation

Related topics