Embedded (Passwordless email flow) + MFA

[enrique]

I currently have the passwordless email flow configured in my application using the embedded login api. I would like to allow my users to enable MFA, and select between text-message and authenticator apps. However, all the docs I see for MFA / triggering MFA lead me to the universal login flow.

Is this even possible using the embedded approach?

[tyf]

Hi there @enrique welcome to the community!

Good question - I’m not entirely sure it is - Like you’ve mentioned almost all docs refer to Universal Login in this context as it’s generally encouraged over embedded for various reasons. MFA in general should be possible in an embedded flow, but you would need to use the MFA API directly as noted here:

MFA with embedded login

Hey there @lapzap98, welcome to the community! It should be possible using the MFA API directly in combination with embedded login via Lock for example, but I am unable to find any samples of the sort. Embedded passwordless login may be another option to look into. However, we definitely encourage the use of Universal Login over embedded if at all possible for reasons outlined here: Hope this helps!

Please do let us know if you have follow up questions and/or can share your solution should you come to one.

Thanks!