# Different MFA policies by organization **URL:** \ **Category:** Get Help\ **Tags:** organizations, mfa, auth0\ **Created:** [October 12, 2021, 6:40pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202 "2021-10-12T18:40:10Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![sunny.pelletier](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sunny.pelletier/32/31728_2.png) [@sunny.pelletier](https://community.auth0.com/u/sunny.pelletier)\ **Post date:** [October 12, 2021, 6:40pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/1 "2021-10-12T18:40:10Z")
Hello, We are working with organizations in Auth0, and we have some security requirements from our customers to use MFA. So we enabled MFA policies and OTP, but it turns out that some customers also have MFA with their SSO, so they would like that have MFA disabled on our side, since it’s redundant for them. Some other customers also want to use SMS rather than OTP for MFA. Is it possible with Auth0 to have different MFA policies by organization ? If yes, where would be that documentation? I couldn’t find anything. If it’s not possible, is there an alternative? ---
**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\ **Post date:** [October 13, 2021, 11:05am UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/2 "2021-10-13T11:05:25Z")
Hey there! Don’t know that but let me reach out to appropriate team to find out more about it! ---
**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\ **Post date:** [October 13, 2021, 12:13pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/4 "2021-10-13T12:13:40Z")
Unfortunately it’s not possible currently. I would highly encourage you to create a feedback card in our Feedback category: > **[Feedback](https://community.auth0.com/c/feedback/95)** > > Submit and vote on product feedback and feature requests. ---
**Author:** ![sunny.pelletier](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sunny.pelletier/32/31728_2.png) [@sunny.pelletier](https://community.auth0.com/u/sunny.pelletier)\ **Post date:** [October 18, 2021, 7:41pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/5 "2021-10-18T19:41:44Z")
Done: For those who are looking to do that as well, I invite you to vote here: [Feature-request: Different MFA policies by organization](https://community.auth0.com/t/feature-request-different-mfa-policies-by-organization/71529) ---
**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\ **Post date:** [October 19, 2021, 9:12am UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/6 "2021-10-19T09:12:25Z")
Perfect! Thanks a lot! ---
**Author:** ![KSchmi](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kschmi/32/14196_2.png) [@KSchmi](https://community.auth0.com/u/KSchmi)\ **Post date:** [October 19, 2021, 9:22pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/7 "2021-10-19T21:22:40Z")
Sunny, my team is going to attempt to have different MFA policies by customer with the following strategy. We are going to add metadata to our enterprise connections that indicates if that connection enforces MFA. Then when a user logs in we check the connection metadata in a rule, if the metadata indicates MFA is enabled on the enterprise connection then we set: ``` context.multifactor = { provider: ‘none’ }; ``` Which would disable MFA. Otherwise we could set ``` context.multifactor = { provider: ‘any’ }; ``` To force MFA, or just let adaptive MFA kick in for high risk logins. ---
**Author:** ![sunny.pelletier](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sunny.pelletier/32/31728_2.png) [@sunny.pelletier](https://community.auth0.com/u/sunny.pelletier)\ **Post date:** [October 19, 2021, 9:59pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/8 "2021-10-19T21:59:34Z")
Interesting. I was not aware you could control MFA provider by rules (we use actions, but I guess it can do the same). Let me know if it works, but that can be a good workaround for now. I’ll try that as well when I get time. Thanks a lot! ---
**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\ **Post date:** [October 20, 2021, 1:18pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/9 "2021-10-20T13:18:08Z")
Thanks @KSchmi for sharing that with the rest! ---
**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\ **Post date:** [October 28, 2021, 12:27pm UTC](https://community.auth0.com/t/different-mfa-policies-by-organization/71202/10 "2021-10-28T12:27:13Z")