Can I trigger MFA in Auth0 without redirecting to Auth0’s MFA page

Community News Community Engineers
, ,
1

Hi,
I am working on a project where I need to trigger MFA for a user but without redirecting them to Auth0’s default MFA screen.

My requirements:

  • I want to fully customize the MFA UI and host it on my own domain.
  • I do not want the user to see Auth0’s MFA challenge page.
  • I want to handle OTP input and verification completely via API calls from my backend/frontend.

What I tried:

  • Using /mfa/challenge API requires a mfa_token, which seems to be generated only after Auth0’s login flow redirects to the MFA page.
  • I tried obtaining a mfa_token directly via Management API or Resource Owner Password Grant, but it seems restricted.

My question:
Is there a way to:

  1. Initiate MFA programmatically via API without redirecting the user to Auth0’s hosted MFA challenge screen?
  2. Obtain a mfa_token directly after user authentication, so I can call /mfa/challenge and /mfa/verify on my own custom screen?

If this is not possible, please confirm so I can adjust my architecture accordingly.