Best practices Change MFA Ph#

[rueben.tiow]

Hi @narayanak,

It seems one of our Community Engineers has tackled this question before in another thread. You might find the solution you’re looking for by checking out the Community Post below:

How can user change phone number used for MFA

Hey there @ssp6 welcome to the community! I think you’re on the right track with this - You want to make sure there is no gap between old and new factor so adding the new one and then deleting the old one in that order is important. General Idea: The user accesses the “profile” page and chooses “Change phone number”. The page checks redirects the user to Auth0 to authenticate and use MFA API as audience. Make sure MFA is enforced to prevent account takeover. Once the re-auth is completed -…

Thanks,
Rueben