Hello, Auth0 community!
Is it possible to customize MFA flow(New Universal Login or Classic), specifically page mfa-login-options, on which the user is able to pick preferable device for OTP retrieval like email or phone number? Is it possible to customize that page so user could see masked device values like on pages mfa-sms-challenge or mfa-email-challenge ?
For the New Universal Login, I believe you can use Advanced Customizations for Universal Login, which allows you to build your own user interface for the login flow. This would give you complete control over the UI, but it would also require you to handle the logic of fetching and displaying the masked data yourself, likely via calls to the Management API, which would add significant complexity.
As for the Classic Login, a key point to understand is that if a user has enrolled multiple MFA factors, they are not given an option to choose. Auth0 will automatically challenge them with the most secure factor they have enrolled. Therefore, the mfa-login-options page you referred to does not appear in the standard Classic flow with multiple factors. See these restrictions in the docs here.