Can MFA secrets be exported?

Background
I’m considering Auth0 as one of options as an IAM solution for our next project, and I’d like to know whether it’s possible to migrate away from Auth0 in the future if our requirements will change.

I’ve confirmed that user password hashes could be exported from this article , but couldn’t find any documents which mention MFA secrets, such as OTP secrets and WebAuthn public keys.

Question

  • Is it possible to export OTP secrets for all users?
  • Is it possible to export WebAuthn public keys for all users?

Best,

Hi @tks

I will say ‘probably not’. However, if you are migrating away from Auth0, the easiest and perhaps best approach is to require reenrollment in MFA.

John

@john.gateley
Understood, thank you for your answer!

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.