# Different MFA Factor Options Per Organization

**URL:** <https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185>\
**Category:** Get Help\
**Tags:** organizations, mfa\
**Created:** [July 19, 2022, 11:49am UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185 "2022-07-19T11:49:43Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![josiah\_devizia](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josiah_devizia/32/33352_2.png) [@josiah\_devizia](https://community.auth0.com/u/josiah_devizia)\
**Post date:** [July 19, 2022, 11:49am UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/1 "2022-07-19T11:49:43Z")

</div>

Hi,

We’re working on integrating our system with Auth0, and our design makes use of the organizations feature. I was wondering if there was a way to limit which MFA factors an organization could have available. I know that the Actions api object allows us to set the mfa provider, but that doesn’t really do what I’m looking for.

Setting the provider to ‘guardian’ would allow the user to use Push, SMS, or OTP.  
What I am hoping for is a way to control whether they can use SMS on a per organization basis. The reasoning is that SMS costs us on our Twilio account, so we want to only opt in specific customers.

Is there a way to do this, or plans to implement something similar?

---

<div class="post-metadata">

**Author:** ![josiah\_devizia](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josiah_devizia/32/33352_2.png) [@josiah\_devizia](https://community.auth0.com/u/josiah_devizia)\
**Post date:** [July 22, 2022, 11:13am UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/4 "2022-07-22T11:13:37Z")

</div>

Yes.

But what I am asking for is a way to control which of these factors are available based on which organization is being used to log in.  
Something like `api.multifactor.enable('any', {factors: ['otp', 'push']})`

---

<div class="post-metadata">

**Author:** ![markd](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/markd/32/38919_2.png) [@markd](https://community.auth0.com/u/markd)\
**Post date:** [July 22, 2022, 11:57am UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/5 "2022-07-22T11:57:53Z")

</div>

Hi @josiah_devizia,

I don’t believe there is a way to do this today. There is a [Feedback](https://community.auth0.com/c/feedback/95) topic here in the forums where you can submit feature requests.

Mark

---

<div class="post-metadata">

**Author:** ![josiah\_devizia](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/josiah_devizia/32/33352_2.png) [@josiah\_devizia](https://community.auth0.com/u/josiah_devizia)\
**Post date:** [July 22, 2022, 12:31pm UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/6 "2022-07-22T12:31:03Z")

</div>

I ended up +1’ing this request.

> [@Complete The Actions MFA Library](https://community.auth0.com/t/complete-the-actions-mfa-library/78140):
>
> Certain customers are quite particular about MFA, and I would like to meet their needs while still enabling strong MFA to everyone possible. Following the documentation [here](https://auth0.com/docs/secure/multi-factor-authentication/customize-mfa?_ga=2.163895743.1676604425.1644526033-670093445.1627500890&_gl=1*18ki6d2*rollup_ga*NjcwMDkzNDQ1LjE2Mjc1MDA4OTA.*rollup_ga_F1G3E656YZ*MTY0NDYwNjE4NC4yOC4xLjE2NDQ2MDc1MTMuNDM.#use-rules) and [here](https://auth0.com/docs/customize/actions/flows-and-triggers/login-flow#enforce-custom-mfa-policy) I’ve been able to implement conditional MFA for some users via actions, but the API is limited and stopping MFA from being what the customer wants. [The options of any, duo, google-authenticator, and guardian](https://auth0.com/docs/customize/actions/flows-and-triggers/login-flow/api-object) ([with a recommendation to only use any](https://auth0.com/docs/customize/actions/flows-and-triggers/login-flow#enforce-custom-mfa-policy)) is limiting. SMS and FIDO2-key are needed options, and every typ…

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [November 4, 2022, 1:46pm UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/7 "2022-11-04T13:46:59Z")

</div>

Thanks for doing that!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [November 4, 2022, 1:47pm UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/8 "2022-11-04T13:47:01Z")

</div>



---

<div class="post-metadata">

**Author:** ![adam.housman](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/adam.housman/32/19907_2.png) [@adam.housman](https://community.auth0.com/u/adam.housman)\
**Post date:** [November 8, 2023, 1:11pm UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/9 "2023-11-08T13:11:45Z")

</div>

This is now possible - you can customize the MFA factors that are required for end-users in a variety of different scenarios. See [this example](https://auth0.com/docs/secure/multi-factor-authentication/customize-mfa-selection-nul#use-metadata-to-determine-challenge-method) which demonstrates how this can be done on a per-Organization basis using Organization metadata.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [November 9, 2023, 8:39am UTC](https://community.auth0.com/t/different-mfa-factor-options-per-organization/87185/10 "2023-11-09T08:39:06Z")

</div>

Thanks a lot Adam for sharing it with the rest of community!
