We are working with organizations in Auth0, and we have some security requirements from our customers to use MFA.
So we enabled MFA policies and OTP, but it turns out that some customers also have MFA with their SSO, so they would like that have MFA disabled on our side, since it’s redundant for them. Some other customers also want to use SMS rather than OTP for MFA.
Is it possible with Auth0 to have different MFA policies by organization ? If yes, where would be that documentation? I couldn’t find anything.
If it’s not possible, is there an alternative?