Consistency Issue When Amending User Authentication Factors via /api/v2/users

Knowledge Articles
1

Overview

This article addresses an issue where adding or removing authentication factors to the multifactor property via the /api/v2/users endpoint may not be reflected immediately. The pending multifactor change is applied only after another, unrelated attribute on the user profile (such as user_metadata ) is successfully updated.

Applies To

  • Get Users Endpoint
  • Multifactor Authentication (MFA)

Cause

This is a known issue with the Get Users endpoint in the Auth0 Engineering backlog.

Solution

Until Auth0 resolves the issue, it is recommended to update another attribute when updating the multifactor attribute with /api/v2/users to ensure the update to the multifactor attribute is successful.