I have turned tried to turn off MFA from auth0 → Security → MFA → Factors → Email.
However, nothing happens after clicking that option. This is causing the MFA to get triggered and ask user for code received in the email address.
How do i turn this off ? I have also tried to reset user’s MFA but it did not help.
Hi @vivek1
Welcome to the Auth0 Community!
I understand that you are encountering issues with turning off your Email MFA factor.
The key point is that Email Multi-Factor Authentication is not a standalone primary factor, it can reappear for users with verified email addresses under supported conditions, and may continue to be triggered if Multi-Factor Authentication enforcement is still enabled elsewhere.
Allow me to share some possible causes for the behaviour that you are seeing:
MFA could be enforced through Actions: check any Actions that set context.multifactor or otherwise force MFA, because Auth0 can still prompt for another enabled factor when MFA is triggered by custom logic;
Check the policy under Require Multi-factor Auth from the Multi-factor Authentication tab in your Dashboard: if you have set MFA to " Always " be required, Email as a factor can still be prompted for users that have their email verified. You can set it o " Never ", click " Save " and check again with one of your affected users if they are getting the same behaviour.
If you hover over the toggle that enables/disables Email as a factor, it should give you additional information. Are you getting any error messages when you click on the toggle to disable Email? In addition, you Auth0 Logs might also provide additional information, as they should register any changes made to the MFA settings.
Let us know if you were able to clear the issue!
Best regards,
Gerald