Hi Auth0 admin,
I’ve tried on MFA of SMS, but it fail when I get /mfa/authenticators, even the mfa_token have just granted. Can you look at my tenant to see what am I missing?
My setup: Trigger MFA for specific Application via clientId, enable MFA factor Phone Message on Tenant, and enable Grant Type: MFA on Application.
curl --location 'https://dev-simplifi.us.auth0.com/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=' \
--data-urlencode 'password=' \
--data-urlencode 'client_id=BscrEPyWL6bvBQwBy3uHCBdfbu86MelD' \
--data-urlencode 'client_secret=' \
--data-urlencode 'audience=playground-2fa-sms-api' \
--data-urlencode 'scope=openid' \
--data-urlencode 'realm=Username-Password-Authentication'
Response:
{
"error": "mfa_required",
"error_description": "Multifactor authentication required",
"mfa_token": "Fe26.2*SERVER_1747718455*4d5afdf18a015ec72ef5a12524b4f9a6052e000ae41a81db66128647c5cc9f8a*89WHeMNpeBJ9OemSHbxzHQ*yjoL-E1sTQIvNzFelolxavirLJ7yhUYPg3VDfY5PH2odkhLLQQ_1lzCiJOD0wFYqv5RCCYzJlICGG1u2Pmi5Gc3Zgk0_Uah_mZLe9zCjYaL0T1KhG0daaDYb5py9Tkw0OP-qph7_Wh3nOgvsQJSQZ0bG3grlR3oMe-Tf7nIcDBQwE7XjstYc3bJtnp__WPj_aq-1f8bc0wrvhNhT_1cKbIrUJq36xl3CeJOAzjHkIh8aTmXgejst7wxPv4Au1b4YtV7dwuiTxSoppKXMEUFeyv1PmbgoibIUu62eiV0NJVQepvaEVxGw8HxtBYe-jK6c7-Q4If_nlRJUK2Po-rh8Lh4JgnW-hGEVRt_anInmvy3bpRXwtzToXoo1DbpqZYwIFkLJsEIYXcQ2OJrIyOdzEMmWPl93GyxFUb1XxtZcfPlFZVQfe8eKxL8Q783Gy8y8mCWwgoMPu_kzSm4JPNy7eSTzwGQ6GgvYApEEEQU71mHmenSt1RzPhlocbQxVps_a5hzzLV101q4CS_j4tyTZ5vcdA-ftpegDmcPc_vlYQI1UtzoXwHedKw7QBfDDSZQNCIvuJXKQiDdGQkWnpX8PtGCCwRvjOLxK5nCZkuq6MFfV11dP41fbHTIgEzqtzkCWFaicDv6LeR3dHyIUK4qJypLZ1VZDPLAqK-rObLpmB7wVO1S9b42p8pIDOMpvgXlyt1VHfBYGNrSfjYn8VTkjwu5gxkt3_EdDS2HlobqDhIzPuVUl7-3DDDwO1eEcBu2uc7BsH9gIz3eGVgqwbFUYrypZv_GJSSZjlhTmLO2jrl1sbxqx59hrbY2Gj6aqLMCv_Uv4r-KfkRcf1QeBUvMXWVm4am1eri_HF-mWgZdXfvmszOLTnUi7LsKpgBSqnfT1YGP3MGo3vP26pOF--RS5qtOWtXCMsyfQl5C9B1SxDe3hz5qX5iXz5reaqdn4MHBE4E1zkfLnYYSIgPjPXRVQYwQB3dvC4bb8d1moNW-gx67tCDAX3oJLIJCBMEoc4SaC2G6s6i1fIloyYj_1EpCz6fs7rWJ1PIXShrizNDwaYD5ZCHsbEkGXjyzzHQJjIZaU7VK-rAbon1TcgVxa2YCwmtnDJBJ9uX8peL4gHApMZU4KvP3s77KsrZeb6d2jYifbtnj6W94RfIj_oD8ZiEwXN66N_8s30oWK2yQBzwDrBJa4BPpKbDl8Mrxz2mbjYGnVyLUGlq4B5-lu4wCV1TsZDwpoxdvapPr5UG5dtiiLd_zth-ehR0DK9LE725bYgmA5GqUpd-MRabWWJX0UVL9QcJk0PQtJB2vnWKR8cCDfNcegIJkG5HCAQjI-oXckgAWG4fYbeee4Ifegv5duRWkMhpcG0VuCRJ2pNFbJ8lM72IDI2jSInUn0qjIz6Aqmmkv98vZ2OlNIdM0u_VuXPWFcWAoDQRpfLIu5pqSidf8uwQgz_VliIv2tzNUlRU6BUThQuYWqPhrT9MhlBy5Ssw9cHalAI8Y5v6oaLnrJwnyWnaWfjKltCtBj5FL9eS5KdZG-hsK6o4T8IDCjS6V3-fK4XvLkJtPzm5EaJCpdYC2grVedDqTXpfluvs8APYFWF59H0piM0YiM3W4gvaRBzSZTzTIbF5JLvuYA2D1RZ23A2zTmUBseWKHcAFBbT54ie5y-nSuWPruA4Sbh5IYio_2xhwnDPzgLy_kFn73wvOoNHrpjVnyvm4jX_lt6iD7hRUXghaQpM3L2LyBXeTjW5dJn7sCuiIWGm5i_mG22MCQ5FKWGOtiXK9WLRpNFH-kSkvZfAd-x6eg1el0yfpacJmFoDi-lFDjEfjTvhEv9x6jO6kYJOWeFx9nSBTlK0ZoPAV2mTp18Yeth0kuM2sbsCe0jsl9huZQoI-8RC5rq2-ce4ydiBKRNNQD0G1Xkp74h5s86SMZpPEM0zq855ZceG3kgvrkGoZVejcrGpEXi7tQvfqIlnR3RMsk0hta2lEKoP6z-kZIjq2YNfY6ASwrMDQgW3p7MiS0gGbGv1tgE8dtLW5IpX3lbM9lrqz3VsbQXPtRSSKLdVtQ-YHjmwZBpIaVML9ecX-8hE1jl7bmcM_EFbkj0Vi-yYWc-Gz253AGwFFMK4YiZ9plq9PuOq0ZF8Rf_Hg*1747744851855*6aa5af9b51ee970dad94866473f4c31c53acfaa355955596fcd456fbbf8a9fb8*O0rTkPfHt3SYU6gxx-kNJ_6N5LVirGCO6K0d6q_Z_g0"
}
But get error when I called for get list of authenticators
curl --location 'https://dev-simplifi.us.auth0.com/mfa/authenticators' \
--header 'Authorization: Bearer Fe26.2*SERVER_1747718455*4d5afdf18a015ec72ef5a12524b4f9a6052e000ae41a81db66128647c5cc9f8a*89WHeMNpeBJ9OemSHbxzHQ*yjoL-E1sTQIvNzFelolxavirLJ7yhUYPg3VDfY5PH2odkhLLQQ_1lzCiJOD0wFYqv5RCCYzJlICGG1u2Pmi5Gc3Zgk0_Uah_mZLe9zCjYaL0T1KhG0daaDYb5py9Tkw0OP-qph7_Wh3nOgvsQJSQZ0bG3grlR3oMe-Tf7nIcDBQwE7XjstYc3bJtnp__WPj_aq-1f8bc0wrvhNhT_1cKbIrUJq36xl3CeJOAzjHkIh8aTmXgejst7wxPv4Au1b4YtV7dwuiTxSoppKXMEUFeyv1PmbgoibIUu62eiV0NJVQepvaEVxGw8HxtBYe-jK6c7-Q4If_nlRJUK2Po-rh8Lh4JgnW-hGEVRt_anInmvy3bpRXwtzToXoo1DbpqZYwIFkLJsEIYXcQ2OJrIyOdzEMmWPl93GyxFUb1XxtZcfPlFZVQfe8eKxL8Q783Gy8y8mCWwgoMPu_kzSm4JPNy7eSTzwGQ6GgvYApEEEQU71mHmenSt1RzPhlocbQxVps_a5hzzLV101q4CS_j4tyTZ5vcdA-ftpegDmcPc_vlYQI1UtzoXwHedKw7QBfDDSZQNCIvuJXKQiDdGQkWnpX8PtGCCwRvjOLxK5nCZkuq6MFfV11dP41fbHTIgEzqtzkCWFaicDv6LeR3dHyIUK4qJypLZ1VZDPLAqK-rObLpmB7wVO1S9b42p8pIDOMpvgXlyt1VHfBYGNrSfjYn8VTkjwu5gxkt3_EdDS2HlobqDhIzPuVUl7-3DDDwO1eEcBu2uc7BsH9gIz3eGVgqwbFUYrypZv_GJSSZjlhTmLO2jrl1sbxqx59hrbY2Gj6aqLMCv_Uv4r-KfkRcf1QeBUvMXWVm4am1eri_HF-mWgZdXfvmszOLTnUi7LsKpgBSqnfT1YGP3MGo3vP26pOF--RS5qtOWtXCMsyfQl5C9B1SxDe3hz5qX5iXz5reaqdn4MHBE4E1zkfLnYYSIgPjPXRVQYwQB3dvC4bb8d1moNW-gx67tCDAX3oJLIJCBMEoc4SaC2G6s6i1fIloyYj_1EpCz6fs7rWJ1PIXShrizNDwaYD5ZCHsbEkGXjyzzHQJjIZaU7VK-rAbon1TcgVxa2YCwmtnDJBJ9uX8peL4gHApMZU4KvP3s77KsrZeb6d2jYifbtnj6W94RfIj_oD8ZiEwXN66N_8s30oWK2yQBzwDrBJa4BPpKbDl8Mrxz2mbjYGnVyLUGlq4B5-lu4wCV1TsZDwpoxdvapPr5UG5dtiiLd_zth-ehR0DK9LE725bYgmA5GqUpd-MRabWWJX0UVL9QcJk0PQtJB2vnWKR8cCDfNcegIJkG5HCAQjI-oXckgAWG4fYbeee4Ifegv5duRWkMhpcG0VuCRJ2pNFbJ8lM72IDI2jSInUn0qjIz6Aqmmkv98vZ2OlNIdM0u_VuXPWFcWAoDQRpfLIu5pqSidf8uwQgz_VliIv2tzNUlRU6BUThQuYWqPhrT9MhlBy5Ssw9cHalAI8Y5v6oaLnrJwnyWnaWfjKltCtBj5FL9eS5KdZG-hsK6o4T8IDCjS6V3-fK4XvLkJtPzm5EaJCpdYC2grVedDqTXpfluvs8APYFWF59H0piM0YiM3W4gvaRBzSZTzTIbF5JLvuYA2D1RZ23A2zTmUBseWKHcAFBbT54ie5y-nSuWPruA4Sbh5IYio_2xhwnDPzgLy_kFn73wvOoNHrpjVnyvm4jX_lt6iD7hRUXghaQpM3L2LyBXeTjW5dJn7sCuiIWGm5i_mG22MCQ5FKWGOtiXK9WLRpNFH-kSkvZfAd-x6eg1el0yfpacJmFoDi-lFDjEfjTvhEv9x6jO6kYJOWeFx9nSBTlK0ZoPAV2mTp18Yeth0kuM2sbsCe0jsl9huZQoI-8RC5rq2-ce4ydiBKRNNQD0G1Xkp74h5s86SMZpPEM0zq855ZceG3kgvrkGoZVejcrGpEXi7tQvfqIlnR3RMsk0hta2lEKoP6z-kZIjq2YNfY6ASwrMDQgW3p7MiS0gGbGv1tgE8dtLW5IpX3lbM9lrqz3VsbQXPtRSSKLdVtQ-YHjmwZBpIaVML9ecX-8hE1jl7bmcM_EFbkj0Vi-yYWc-Gz253AGwFFMK4YiZ9plq9PuOq0ZF8Rf_Hg*1747744851855*6aa5af9b51ee970dad94866473f4c31c53acfaa355955596fcd456fbbf8a9fb8*O0rTkPfHt3SYU6gxx-kNJ_6N5LVirGCO6K0d6q_Z_g0'
Response
{
"error": "invalid_grant",
"error_description": "The mfa_token provided is invalid. Try getting a new token."
}
Thanks,
Hi @hoai.pham
Welcome to the Auth0 Community!
In the 2nd call, when you are calling for the list of authenticators, can you add the content-type: application/json to the request:
curl --request GET
–url ‘https://dev-simplifi.us.auth0.com/mfa/authenticators’
–header ‘authorization: Bearer MFA_TOKEN’
–header ‘content-type: application/json’
You can read more about that from our documentation here → https://auth0.com/docs/secure/multi-factor-authentication/authenticate-using-ropg-flow-with-mfa
Thanks
Dawid
I’ve just tried to add header ‘content-type: application/json’, but get the same result. It didn’t help
{
“error”: “invalid_grant”,
“error_description”: “The mfa_token provided is invalid. Try getting a new token.”
}
curl --location 'https://dev-simplifi.us.auth0.com/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=hoaixuimay@gmail.com' \
--data-urlencode 'password=0613968142Plifi!' \
--data-urlencode 'client_id=BscrEPyWL6bvBQwBy3uHCBdfbu86MelD' \
--data-urlencode 'client_secret=tg5929hhUiwlBQVmgg1Sh7bP1A1LsvirP3R6YPWZsnqL6Czt8CFtUzOgn9wFlwTa' \
--data-urlencode 'audience=playground-2fa-sms-api' \
--data-urlencode 'scope=offline_access openid profile email'
{
"error": "mfa_required",
"error_description": "Multifactor authentication required",
"mfa_token": "Fe26.2*SERVER_1747718455*31a33318905112aea5d226f254d99d6e74c1ff74259f2b5b247ec64104223f04*MoLV6kK6yhHANc38DtnB5A*Q3VOhKBaiKzcILjs6hWufpmKId8Jg4gvNWNiffW2diYIeZpi6HkVGn82io_Pv7Yu33xHG6NZwR030GAEizPgxwiAT8u7vX-5_VWI3_RaVE8YzKQCteKh8iku9ZqHdsZhOQpSUXNzgzfNH2GOwqRphahLAt_Y0xxuvmaBn5fCOYinESgQGaBFpY2E7DAs8TuZ63Mnd1qzyJRZLrcbmA6lX5CiJaox2T8rIrdTIKtLUeU3K9ht_Fa_ANr51Jh3NwJRA0KrUf5nYz5cUijaxgU_7K6bZXuPoaSHmA5qGeRI6eyWkmI-P6WB80Am1Cb1ySVFPueu-DtnQwWTueYOpux8ON7SEPiD-K8t55VMcDjk_UrVdMfLLxBImq5D15t1c0J_KkIEqAotAOogX6OrOXvIss6Edwb0odnfdKRN2GXnis98tFQR1954tnR3HKZtkwW5HiwJvQLSy559SvMxj6QA2CbjxmVlVuM4-zw4MkfUqcRmhWO2oKlNpnj9yRix_7lIle6tc01PvZWOSH8FX67mM8pF5vXb03KwxHy2SvPK85urQgqvnerTlK3MDyfcnqbJpY_2KJ_-oeqhbaCWFENQqRYzN0Zf8Uk7ah2IC8qpiN9ef0RcBAr-G5z7LpISCNy4kt-iibZaTDOvG9b3YnHt6m46QR_XbyKuTqeU_IxFTa5WHKvuIsaqaZmgQXlU7JnJpcrBylzOz10uuQ8bJICyS6DdBcFA2gDDkbLedZQ114HK11DpDsFvB2BUlN0rGbl7qmTgDgY_Eb4BF7fpWcE7ih6NhNKK3Vk2xzvH9Vfa-skl8w6svq-XuPhnivnbUASmLFdBHjGulzrYEZ-8WsU-DqCYv_WV-iQkf1ZUz8vtNthgK91EBheIKwcMogivrO35WIsabG92NVVQJg457JTUgK1TI7qNH2Butn1Dxm615Ov_YwvvN0xYhyF1DpGGx9UYd_rCciwHTloSHG7Ds5HzNns4uzSm_BC6Ql1D9hy-A7dYmJ4Twm1ahFOCeJaFrGks5pxQMW_OvGrZXeKwFcG3qDS-ihuoTxmfLe8hzW3z5bWgfjL0z01-zEMJzwLEyCUvTZ-RMeFkGGl6cIBb33kqiuPYG6EmY8JGEt9D6g1z67pOLz4I0sFi_Eojbr9YctY7HYt8gk9w4A8YSdshCrZ7Nzp7DAE0y2okvVVodY39RDd7RblA1cW0rivmZ8bMCY3x1MNafot5ViTmdyL_LWzV7Ss1dfKpOktJT5IRN37bc-Bub2kyl8eNzyCthaNH7FEWMnz9eKK6ry_x35zHnBoVK19HXtNiG0MsbqTTK2N4Xv-1OU_Y93TwQCMM6_5SF3atzSQzzTfPoHSWqEnve3cR6UjFGoA-sfbwjsrU3NH2CDvg6Vv0j7_pZwUCS0q4b3MftkRBGGdNgPKJjbQ8CPxNImot2GLvnmHYJ0iRinZaO3_UUnGGa1v6LtQV16tx38iGtR2uto4yr7YeBwAoLaCsXVDhmzwH5o9F1rUdbA2MSXLrOdrwyWp7tcBHDXYEPNZJdsWAaurU5ZXpNh3QDH_1tIJ3D2ur0TlgNXZWe9PktkyLzllsQMCbkJA5Oij8TlT1HAgD0MVi3CpU8VaJLbrELc5FsGSzO35Ptpmpswou9JhTljvQBFFlSHAwYtQ58FCsbeL66mZOPibUqBWbBCsGbCDquDuyr2jyyRswFmAyxF6_oedQlDXFb6MSrPgT4ZA2h0aJsOsswnMP69DovKGgOLEd-5MYULsZCZuCyOyMPq3c-Nw9nDZYL4XurddjZCgC7tZ86E8hoXett5SB00cJItUOMPy4TjfRFgO0lPDwaTjgGYjDCULPZesoajEQOVcuYJ9gdPS5ACHQqbiX3zGhpG958BlCYoG0h_zfCMESFBSb5GnrJ2iRSJqlTrD0itJb6hROXqc8szYkptB2N4CYWqP6YgcCn0F_NbU46utn9nME5n5bDDyEC7AuGCP2-1Zzt0MxeIT0VlYxkh62BUjU_IyrOfWJVqqoBuaUYviWyUww2gK5bjkVprTxu1L4SUWLL7Ar-TqAKp9zPUR4k3ORkwcVuQlNjJVbssALzMLGfsWjtENg7zJL9dtSoabhcq1a*1747751233130*b0ea2a36b26a734c486100d962cbe1c30322f21cef14c7b70f9453ac2ba9e4b6*01CRi1mcMh0BONxNe5dOvPCJcK1xCQkqm64yyDOeFpo"
}
curl --request GET \
--url 'https://dev-simplifi.us.auth0.com/mfa/authenticators' \
--header 'authorization: Bearer Fe26.2*SERVER_1747718455*31a33318905112aea5d226f254d99d6e74c1ff74259f2b5b247ec64104223f04*MoLV6kK6yhHANc38DtnB5A*Q3VOhKBaiKzcILjs6hWufpmKId8Jg4gvNWNiffW2diYIeZpi6HkVGn82io_Pv7Yu33xHG6NZwR030GAEizPgxwiAT8u7vX-5_VWI3_RaVE8YzKQCteKh8iku9ZqHdsZhOQpSUXNzgzfNH2GOwqRphahLAt_Y0xxuvmaBn5fCOYinESgQGaBFpY2E7DAs8TuZ63Mnd1qzyJRZLrcbmA6lX5CiJaox2T8rIrdTIKtLUeU3K9ht_Fa_ANr51Jh3NwJRA0KrUf5nYz5cUijaxgU_7K6bZXuPoaSHmA5qGeRI6eyWkmI-P6WB80Am1Cb1ySVFPueu-DtnQwWTueYOpux8ON7SEPiD-K8t55VMcDjk_UrVdMfLLxBImq5D15t1c0J_KkIEqAotAOogX6OrOXvIss6Edwb0odnfdKRN2GXnis98tFQR1954tnR3HKZtkwW5HiwJvQLSy559SvMxj6QA2CbjxmVlVuM4-zw4MkfUqcRmhWO2oKlNpnj9yRix_7lIle6tc01PvZWOSH8FX67mM8pF5vXb03KwxHy2SvPK85urQgqvnerTlK3MDyfcnqbJpY_2KJ_-oeqhbaCWFENQqRYzN0Zf8Uk7ah2IC8qpiN9ef0RcBAr-G5z7LpISCNy4kt-iibZaTDOvG9b3YnHt6m46QR_XbyKuTqeU_IxFTa5WHKvuIsaqaZmgQXlU7JnJpcrBylzOz10uuQ8bJICyS6DdBcFA2gDDkbLedZQ114HK11DpDsFvB2BUlN0rGbl7qmTgDgY_Eb4BF7fpWcE7ih6NhNKK3Vk2xzvH9Vfa-skl8w6svq-XuPhnivnbUASmLFdBHjGulzrYEZ-8WsU-DqCYv_WV-iQkf1ZUz8vtNthgK91EBheIKwcMogivrO35WIsabG92NVVQJg457JTUgK1TI7qNH2Butn1Dxm615Ov_YwvvN0xYhyF1DpGGx9UYd_rCciwHTloSHG7Ds5HzNns4uzSm_BC6Ql1D9hy-A7dYmJ4Twm1ahFOCeJaFrGks5pxQMW_OvGrZXeKwFcG3qDS-ihuoTxmfLe8hzW3z5bWgfjL0z01-zEMJzwLEyCUvTZ-RMeFkGGl6cIBb33kqiuPYG6EmY8JGEt9D6g1z67pOLz4I0sFi_Eojbr9YctY7HYt8gk9w4A8YSdshCrZ7Nzp7DAE0y2okvVVodY39RDd7RblA1cW0rivmZ8bMCY3x1MNafot5ViTmdyL_LWzV7Ss1dfKpOktJT5IRN37bc-Bub2kyl8eNzyCthaNH7FEWMnz9eKK6ry_x35zHnBoVK19HXtNiG0MsbqTTK2N4Xv-1OU_Y93TwQCMM6_5SF3atzSQzzTfPoHSWqEnve3cR6UjFGoA-sfbwjsrU3NH2CDvg6Vv0j7_pZwUCS0q4b3MftkRBGGdNgPKJjbQ8CPxNImot2GLvnmHYJ0iRinZaO3_UUnGGa1v6LtQV16tx38iGtR2uto4yr7YeBwAoLaCsXVDhmzwH5o9F1rUdbA2MSXLrOdrwyWp7tcBHDXYEPNZJdsWAaurU5ZXpNh3QDH_1tIJ3D2ur0TlgNXZWe9PktkyLzllsQMCbkJA5Oij8TlT1HAgD0MVi3CpU8VaJLbrELc5FsGSzO35Ptpmpswou9JhTljvQBFFlSHAwYtQ58FCsbeL66mZOPibUqBWbBCsGbCDquDuyr2jyyRswFmAyxF6_oedQlDXFb6MSrPgT4ZA2h0aJsOsswnMP69DovKGgOLEd-5MYULsZCZuCyOyMPq3c-Nw9nDZYL4XurddjZCgC7tZ86E8hoXett5SB00cJItUOMPy4TjfRFgO0lPDwaTjgGYjDCULPZesoajEQOVcuYJ9gdPS5ACHQqbiX3zGhpG958BlCYoG0h_zfCMESFBSb5GnrJ2iRSJqlTrD0itJb6hROXqc8szYkptB2N4CYWqP6YgcCn0F_NbU46utn9nME5n5bDDyEC7AuGCP2-1Zzt0MxeIT0VlYxkh62BUjU_IyrOfWJVqqoBuaUYviWyUww2gK5bjkVprTxu1L4SUWLL7Ar-TqAKp9zPUR4k3ORkwcVuQlNjJVbssALzMLGfsWjtENg7zJL9dtSoabhcq1a*1747751233130*b0ea2a36b26a734c486100d962cbe1c30322f21cef14c7b70f9453ac2ba9e4b6*01CRi1mcMh0BONxNe5dOvPCJcK1xCQkqm64yyDOeFpo' \
--header 'content-type: application/json'
{"error":"invalid_grant","error_description":"The mfa_token provided is invalid. Try getting a new token."}%
I’ve follow the document, but get the same error
hoaipham@Hoais-MacBook-Pro ~ % curl --request POST \
--url 'https://dev-simplifi.us.auth0.com/oauth/token' \
--header 'content-type: application/x-www-form-urlencoded' \
--data grant_type=password \
--data username=hoaixuimay@gmail.com \
--data password=0613968142Plifi! \
--data 'client_id=BscrEPyWL6bvBQwBy3uHCBdfbu86MelD' \
--data 'client_secret=tg5929hhUiwlBQVmgg1Sh7bP1A1LsvirP3R6YPWZsnqL6Czt8CFtUzOgn9wFlwTa' \
--data audience=playground-2fa-sms-api \
--data 'scope=openid profile'
{"error":"mfa_required","error_description":"Multifactor authentication required","mfa_token":"Fe26.2*SERVER_1747718455*a01d5f00c37a56bf408b6c5e9d02610d73745d63cb985ff2c452303af84e67c1*p53KbLnjwmxtJUth7IiF2Q*08Z_XpZfqgGbggz4v5SnGUbpuzsDGhBcg51PfUvhRkswILgQNH5GAjJmcAYaVrqt7jb_TwFNXmGML1jlJ6BrsbZ1LzYisZOshPH0GncOhgTeTf5GaJR2mLmdmI7kxvz1Q8Palu3Kwx-58G7IiLAqLfuqVxHVmf8T1PGKM-b1jrR49cifCSharhXfU-OkfqGFyJlsbU4koI8eUYmv2nm3C1C8kiDyFOS31l2VgFqMm6AKBpewliErHUjEpad_FJD0Sh7gylUz1e8lXcKopBXBxniksnATSH8WNIfS-OlvNQCP6ir0gwvHRqsA420PjyQAXYpX1VsDIis9tNhcLkQP80qsVS0h4ujQZGfzpyZN4kqd3PejOC6SFweIELmbCF9CmazXZAckX1-O_T-ccWQiNMhtetEj5bDGHEONN0US0APVAs05EsOx8lANy7aFnOMXn08edMigCwE35m9Xnpn_fcVLmDLk9LEd7c5WljbSf7OW8ubk6rw2aaWz_KwhJdK-B7VJATDQLqGOsArx-F1I4_C0wT2g9ACW9k7MTDkyTqDHxhaUc4TB4DuSANgJXEqNVCmA5qnKNFOVTusvvpJfwACkaTF0atZaD23baVwevf03utnTxLCGyK37JwbCOTD75OGysP8VJzkpZqkGxhSO1nWYUMXEQm_SBP2LsGVA6iLbqDV8P5ZFbXvhtMqiI9xo1supa6_N4wCHXNOIQRKTF0c3RBE-2n7JGHGnYUcLh2SfoG1MNyrjWx9tJUL76ZjO9GC-xOkFd-7ThDeBuG-FKPu97KWeoqayBCN0iuVd6YRh9O0ikBQ66TZeEjVTjj5_9lududA5uzNTU_A40leyKZPrEN0fya8lebL_8NaUhgveIIlaNFeXFFSn6hwgIgjm2WB1savWp_knOaiKjTgSkwcZ2rvSj1neywafjxJug8qq3qKD_3ifylzooECPBzk7bjPrX-X2MqhXnw3bZZrFDR8pfiOIWL5_dwV0ZNQDFJKZF-CIoFr-1psOEr7VGRCJScCH9CEAmC6Y-dgpqjFmpDeQ3Pj7io3TXnml5n5Ukz9YL9jzPFiCCLxXGernn8DGayP-zA4Rx9j5NJDt7lNHp-yRxBYUAR5a8NlhPYPKYMVdvZzz5Rv1zX6OI78tNULOfqcjVA1mpFFWCVC-rAQdEQPZnmIBf10_V9iTuwri-3siGuUYpo8OUVJkLPA8htgPGZCI1pZGseNevpdwjLo6oLoRj2RA8qDsqXWQcykFR_dVqVwEBj16u02aVJkKz-OyKR2lwp4FPKP-tKshsBhMNsIdR8HehWxgihLYo-H4YskGB_Ifsdpp3WC2n4f36bCNn9AriUkQO3puOIaQ3-UioSXewPb6HYYUTYS2oXsU0PBeNHi4XNOw0i70_JhA3fjAXxESqJ2RpfCAyq_OPyO0q9zsKTx-JrM4N5de2qzkW1jiJ_9pp7mdTknIJRxoZrJDe3XJ0iFB8_EHMYQN155Ww6rzTXf2h-3O7iw3VcaEomOljAlZzgaQgwNjq5nCZ0rWJ2ewL7CAU2jg4N2vZiqmsj9jZUHRPEDS4DeARacWVc8pRnLI8gytDXyC3dgkTIjsUU1PldYODApUmFk5j5r0wspH8AVExwl9uoimor099BHscTW3NsZK2yjSN2CeOlyTcBVsvU2rG8d4c9uWssUMkL_1Zr-yYszWNb6nXk4Gh12bEujzCLO15hPopTqW52yBURY3_Fj9p34iB0xUVXeSyjaXXbxLWsFNzHfifKiHqby_eCY_7yOfTUndxxEGvBrP6rgxDSR67G3FgioPq0Nc037vjTVaDMLx6z0iuiFYCYOOOP1-gG6YkNQg8mWIeA4ffqilysZLHkzEpSwnlNce-fdYkvj-Hm9p7qOjopdlyRoZ739WRkZ_slm5P2o5Gvhe2cko7do_P3l4AxmatzdjxT-6Y35YKfi50jke1VRewWNHN1B1fPm2e36AGo4vw5zb2TBiLN1aqXbftbXI1yXLq22BwjNN1OJYILKKMlJAaTM*1747752102482*41091f21244fe0c64ba127c677c7a6eba45515c8b94a57b87b4fb8bf4e30eb27*5v38qn2JE13UXALzik0NbzsbpTZ831GV35YghdCp3PY"}
hoaipham@Hoais-MacBook-Pro ~ % curl --request GET \
--url 'https://dev-simplifi.us.auth0.com/mfa/authenticators' \
--header 'authorization: Bearer Fe26.2*SERVER_1747718455*a01d5f00c37a56bf408b6c5e9d02610d73745d63cb985ff2c452303af84e67c1*p53KbLnjwmxtJUth7IiF2Q*08Z_XpZfqgGbggz4v5SnGUbpuzsDGhBcg51PfUvhRkswILgQNH5GAjJmcAYaVrqt7jb_TwFNXmGML1jlJ6BrsbZ1LzYisZOshPH0GncOhgTeTf5GaJR2mLmdmI7kxvz1Q8Palu3Kwx-58G7IiLAqLfuqVxHVmf8T1PGKM-b1jrR49cifCSharhXfU-OkfqGFyJlsbU4koI8eUYmv2nm3C1C8kiDyFOS31l2VgFqMm6AKBpewliErHUjEpad_FJD0Sh7gylUz1e8lXcKopBXBxniksnATSH8WNIfS-OlvNQCP6ir0gwvHRqsA420PjyQAXYpX1VsDIis9tNhcLkQP80qsVS0h4ujQZGfzpyZN4kqd3PejOC6SFweIELmbCF9CmazXZAckX1-O_T-ccWQiNMhtetEj5bDGHEONN0US0APVAs05EsOx8lANy7aFnOMXn08edMigCwE35m9Xnpn_fcVLmDLk9LEd7c5WljbSf7OW8ubk6rw2aaWz_KwhJdK-B7VJATDQLqGOsArx-F1I4_C0wT2g9ACW9k7MTDkyTqDHxhaUc4TB4DuSANgJXEqNVCmA5qnKNFOVTusvvpJfwACkaTF0atZaD23baVwevf03utnTxLCGyK37JwbCOTD75OGysP8VJzkpZqkGxhSO1nWYUMXEQm_SBP2LsGVA6iLbqDV8P5ZFbXvhtMqiI9xo1supa6_N4wCHXNOIQRKTF0c3RBE-2n7JGHGnYUcLh2SfoG1MNyrjWx9tJUL76ZjO9GC-xOkFd-7ThDeBuG-FKPu97KWeoqayBCN0iuVd6YRh9O0ikBQ66TZeEjVTjj5_9lududA5uzNTU_A40leyKZPrEN0fya8lebL_8NaUhgveIIlaNFeXFFSn6hwgIgjm2WB1savWp_knOaiKjTgSkwcZ2rvSj1neywafjxJug8qq3qKD_3ifylzooECPBzk7bjPrX-X2MqhXnw3bZZrFDR8pfiOIWL5_dwV0ZNQDFJKZF-CIoFr-1psOEr7VGRCJScCH9CEAmC6Y-dgpqjFmpDeQ3Pj7io3TXnml5n5Ukz9YL9jzPFiCCLxXGernn8DGayP-zA4Rx9j5NJDt7lNHp-yRxBYUAR5a8NlhPYPKYMVdvZzz5Rv1zX6OI78tNULOfqcjVA1mpFFWCVC-rAQdEQPZnmIBf10_V9iTuwri-3siGuUYpo8OUVJkLPA8htgPGZCI1pZGseNevpdwjLo6oLoRj2RA8qDsqXWQcykFR_dVqVwEBj16u02aVJkKz-OyKR2lwp4FPKP-tKshsBhMNsIdR8HehWxgihLYo-H4YskGB_Ifsdpp3WC2n4f36bCNn9AriUkQO3puOIaQ3-UioSXewPb6HYYUTYS2oXsU0PBeNHi4XNOw0i70_JhA3fjAXxESqJ2RpfCAyq_OPyO0q9zsKTx-JrM4N5de2qzkW1jiJ_9pp7mdTknIJRxoZrJDe3XJ0iFB8_EHMYQN155Ww6rzTXf2h-3O7iw3VcaEomOljAlZzgaQgwNjq5nCZ0rWJ2ewL7CAU2jg4N2vZiqmsj9jZUHRPEDS4DeARacWVc8pRnLI8gytDXyC3dgkTIjsUU1PldYODApUmFk5j5r0wspH8AVExwl9uoimor099BHscTW3NsZK2yjSN2CeOlyTcBVsvU2rG8d4c9uWssUMkL_1Zr-yYszWNb6nXk4Gh12bEujzCLO15hPopTqW52yBURY3_Fj9p34iB0xUVXeSyjaXXbxLWsFNzHfifKiHqby_eCY_7yOfTUndxxEGvBrP6rgxDSR67G3FgioPq0Nc037vjTVaDMLx6z0iuiFYCYOOOP1-gG6YkNQg8mWIeA4ffqilysZLHkzEpSwnlNce-fdYkvj-Hm9p7qOjopdlyRoZ739WRkZ_slm5P2o5Gvhe2cko7do_P3l4AxmatzdjxT-6Y35YKfi50jke1VRewWNHN1B1fPm2e36AGo4vw5zb2TBiLN1aqXbftbXI1yXLq22BwjNN1OJYILKKMlJAaTM*1747752102482*41091f21244fe0c64ba127c677c7a6eba45515c8b94a57b87b4fb8bf4e30eb27*5v38qn2JE13UXALzik0NbzsbpTZ831GV35YghdCp3PY' \
--header 'content-type: application/json'
{"error":"invalid_grant","error_description":"The mfa_token provided is invalid. Try getting a new token."}%
@dawid.matuszczyk does it related to Package Plan? I setup and tested on Free Plan Tenant before go to the paid Production tenant.
Last time I setup on Email factor, and it work on Free Plan but now it didn’t even with Email factor.
My setup on last time on Email: MFA Email factor failed for second time
Hi @hoai.pham
Thank you for the response. I think the issue here can be with the audience during the obtaining the token. According to our documentation:
To access this endpoint, you must set an Access Token at the Authorization header, with the following claims:
scope: read:authenticatorsaudience: https://${account.namespace}/mfa/
Can you update this parameters in your /oauth/token request, and then try to make a call to the /mfa/authenticators with the new token?
Thanks
Dawid
Hi @dawid.matuszczyk ,
It is still the same error. You can copy/paste my commands for checking.
I posted <mfa_token> because it violate the policy the text contain “***”.
hoaipham@Hoais-MacBook-Pro ~ % curl --location 'https://dev-simplifi.us.auth0.com/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=hoaixuimay@gmail.com' \
--data-urlencode 'password=' \
--data-urlencode 'client_id=BscrEPyWL6bvBQwBy3uHCBdfbu86MelD' \
--data-urlencode 'client_secret=' \
--data-urlencode 'audience=https://dev-simplifi.us.auth0.com/mfa/' \
--data-urlencode 'scope=offline_access openid profile email read:authenticators'
{"error":"mfa_required","error_description":"Multifactor authentication required","mfa_token":"<mfa_token>"}
hoaipham@Hoais-MacBook-Pro ~ %
hoaipham@Hoais-MacBook-Pro ~ %
hoaipham@Hoais-MacBook-Pro ~ % curl --location 'https://dev-simplifi.us.auth0.com/mfa/authenticators' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <mfa_token>'
{"error":"invalid_grant","error_description":"The mfa_token provided is invalid. Try getting a new token."}
Even I only use 1 scope read:authenticators
hoaipham@Hoais-MacBook-Pro ~ % curl --location 'https://dev-simplifi.us.auth0.com/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=hoaixuimay@gmail.com' \
--data-urlencode 'password=0613968142Plifi!' \
--data-urlencode 'client_id=BscrEPyWL6bvBQwBy3uHCBdfbu86MelD' \
--data-urlencode 'client_secret=a' \
--data-urlencode 'audience=https://dev-simplifi.us.auth0.com/mfa/' \
--data-urlencode 'scope=read:authenticators'
{"error":"mfa_required","error_description":"Multifactor authentication required","mfa_token":"Fe26.2*SERVER_1747784919*a8edb03c606caf2530f01aa6f96a1f2eae4f0b1df95cb3eef822d9c278cdffb3*7i7EcJNi1kl7N4Pvp27iSQ*QifasP6WQI2vbLWCeW976ZoTyHfkloSj42uy1daMlubdnCzp3MuGn24HJvyK1J2U4i4YTE7C_SIKryMSq_A-ywz5yBBmumx3V0-nEMYc_ywrOmLjGjaYA0ZkzZx_WpyhhyOn0jjwrni_iDsPzhEaOOiBIzlg65g4qU40r4ZGqIm3bbBm_jpEnHJXWkTio_xg_0Vh_0t-nlU9AKCVOeXUk0dzpOE_tJSAcSZAAvA6-6U2EObAX3LSvjr5qpaO3rcivpJsjgT0_lI27TL_9eJxA_8_SrNRvAWOc9bZWyn2_YjaBs8DN6DuyPsWZlo3pKoUC-YU7aUI_UfwKHb3pJNtmwR0eJLvdhS9OnRyIUuRCPlvUVvSb9s4yiIULoUB9agBi_8PYRRvhMSw3x9xD7h90taHFLjQG0MwK8NH4p9yAbNedjOkoFCdfOUQbOS_6AZLdsYJEkSKPVVO8C2M-N5AhaW-wgo3XaHTwz6l8p1E2BVFWo0UWvEaDFntRoeVAFNOhwlHGzANgvsOh9Y1AZY3dojGS8jb4l0gdZDQn3lfDQ2VtbLoqTEjJZwm16FtkKuhiWLXNPDsvvrqBFq8I-VxQa2NVlF8ZOy9IRxWEo8Nb8oc0ZwH05RS2uGHuXri-MpTFBtWqlslQWG21CXbJQzd6LjiECvRBVEVTukC8ndU7z8x1ORKzDO4L8Pl0GmMfQja1jwWl0VbpX5FlDx05JryV3xOy0o870mVhdNVifM8BbVmUlPDCeCFQJf4hoEjAD8axXo1DorabZ86HSsehHG21DTxswDxionAMhRixZ_dKJKbQdzdUL9ZyckBmU3_7vM2hTtuggOqew3mIK415L99xybxOHJVAJr82-S9DmQ-rh9E5Zef9kKLl-ZETfoqDL9p-lTe4DEpM3FfBQfzh6j5ebFQGB5zvvlU-4Qkv0aJXhKhPsRnGxC3geGI8qeBSvM1B-tLULoGQtImsgzIq3wzJUF7XXAGePWc-pvZ4e4qQnBUBNkXGC02iV6qCtnwXTGw_II2mNt8_Bt1xjob9WNetOKx45jroQ01nyK6UZwyG0x8fHkYfc40ZhGEUOxIkOAytLsPON5MzLSdYkIGLbAZnTMpayGaDo6MHpvAze9buPRuQV97kLtI2HXsWNeuRVskpf4ah7_ktDByMSyqraLLhFXla527lDrGnZ-RTCAN3uD13oGx2EAOw26208Y35J3JUXHyjhvgJvi5ShtmBFYoafNOLzb8o72y9-tLCct8N3C535qqCTpLKTPTnvKQnQ_kNPfsTtz-I3CXNsaxO9-eS2o884USYvY8f_TIb90LPGkWH9yg8_gXZFxzzPmwEpIIltTDOOAXcWFzvkLWSx_VjamU7ODz4rEWBpQPJRkA7ldF94SOm4-uXfJhU5c90iZ1uMnvqFdj-b7Ma43i4Cs8Tax2RHpkkSxAJQsSP3OA2J_wveG5NO9E9NmBqGoNdkkm5vRT4j0KC24ZUCaiFzLLQbYyyoatCQf5_tZVQK53MFDUONmMlL3fq4o_T18i2oirq0C24Za_L1Lv5PnX6Gs02HtMQKp-O0gp6V6OvxTi5G1OjUsD-J1ae0WtVCHaCqJDHiwyPK-uijbwVRu5-D6iJCV4bbtUNszmh-lsVUmr7IM8owJM2pRGqrkYhxJQMDIJnMUoXqrx0xgNXsHWSOim4hV1M_vkxOsmYZpBxpG8w5vtC-soLPS2-olb9uJ5z0BtL52xmU0y8Dj6rUqjfSGY7GrVHm_sdOPjgNBKuY-JFN-Xv-OdxuYWfmRc3G8erROI72S-JsVuhNb3px4apttxB_3y6wosxkJu65ICVWrnMJapy93KrMmAZCMQDbDjKBZ9Et7YUlBQhkqgjA_pf006rq2mwKdzAJILBFMwxz_B_GTfDgiUKQU0CCGq16EfGde3XJTNqmfz_cewd5rtSs0KcCYVwLcACeJAe8nK3NjueLmdiPpaHFr-gBMK_LD0qSaw*1747826501461*7b305f14635635f4096bf9ffa9bf03942836b7913de3bcaf4de0823095784865*WJs7WPvyxLqiejwVUwR-f126czgKiLdJ_r6bjhRs7e4"}
hoaipham@Hoais-MacBook-Pro ~ % curl --location 'https://dev-simplifi.us.auth0.com/mfa/authenticators' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer Fe26.2*SERVER_1747784919*a8edb03c606caf2530f01aa6f96a1f2eae4f0b1df95cb3eef822d9c278cdffb3*7i7EcJNi1kl7N4Pvp27iSQ*QifasP6WQI2vbLWCeW976ZoTyHfkloSj42uy1daMlubdnCzp3MuGn24HJvyK1J2U4i4YTE7C_SIKryMSq_A-ywz5yBBmumx3V0-nEMYc_ywrOmLjGjaYA0ZkzZx_WpyhhyOn0jjwrni_iDsPzhEaOOiBIzlg65g4qU40r4ZGqIm3bbBm_jpEnHJXWkTio_xg_0Vh_0t-nlU9AKCVOeXUk0dzpOE_tJSAcSZAAvA6-6U2EObAX3LSvjr5qpaO3rcivpJsjgT0_lI27TL_9eJxA_8_SrNRvAWOc9bZWyn2_YjaBs8DN6DuyPsWZlo3pKoUC-YU7aUI_UfwKHb3pJNtmwR0eJLvdhS9OnRyIUuRCPlvUVvSb9s4yiIULoUB9agBi_8PYRRvhMSw3x9xD7h90taHFLjQG0MwK8NH4p9yAbNedjOkoFCdfOUQbOS_6AZLdsYJEkSKPVVO8C2M-N5AhaW-wgo3XaHTwz6l8p1E2BVFWo0UWvEaDFntRoeVAFNOhwlHGzANgvsOh9Y1AZY3dojGS8jb4l0gdZDQn3lfDQ2VtbLoqTEjJZwm16FtkKuhiWLXNPDsvvrqBFq8I-VxQa2NVlF8ZOy9IRxWEo8Nb8oc0ZwH05RS2uGHuXri-MpTFBtWqlslQWG21CXbJQzd6LjiECvRBVEVTukC8ndU7z8x1ORKzDO4L8Pl0GmMfQja1jwWl0VbpX5FlDx05JryV3xOy0o870mVhdNVifM8BbVmUlPDCeCFQJf4hoEjAD8axXo1DorabZ86HSsehHG21DTxswDxionAMhRixZ_dKJKbQdzdUL9ZyckBmU3_7vM2hTtuggOqew3mIK415L99xybxOHJVAJr82-S9DmQ-rh9E5Zef9kKLl-ZETfoqDL9p-lTe4DEpM3FfBQfzh6j5ebFQGB5zvvlU-4Qkv0aJXhKhPsRnGxC3geGI8qeBSvM1B-tLULoGQtImsgzIq3wzJUF7XXAGePWc-pvZ4e4qQnBUBNkXGC02iV6qCtnwXTGw_II2mNt8_Bt1xjob9WNetOKx45jroQ01nyK6UZwyG0x8fHkYfc40ZhGEUOxIkOAytLsPON5MzLSdYkIGLbAZnTMpayGaDo6MHpvAze9buPRuQV97kLtI2HXsWNeuRVskpf4ah7_ktDByMSyqraLLhFXla527lDrGnZ-RTCAN3uD13oGx2EAOw26208Y35J3JUXHyjhvgJvi5ShtmBFYoafNOLzb8o72y9-tLCct8N3C535qqCTpLKTPTnvKQnQ_kNPfsTtz-I3CXNsaxO9-eS2o884USYvY8f_TIb90LPGkWH9yg8_gXZFxzzPmwEpIIltTDOOAXcWFzvkLWSx_VjamU7ODz4rEWBpQPJRkA7ldF94SOm4-uXfJhU5c90iZ1uMnvqFdj-b7Ma43i4Cs8Tax2RHpkkSxAJQsSP3OA2J_wveG5NO9E9NmBqGoNdkkm5vRT4j0KC24ZUCaiFzLLQbYyyoatCQf5_tZVQK53MFDUONmMlL3fq4o_T18i2oirq0C24Za_L1Lv5PnX6Gs02HtMQKp-O0gp6V6OvxTi5G1OjUsD-J1ae0WtVCHaCqJDHiwyPK-uijbwVRu5-D6iJCV4bbtUNszmh-lsVUmr7IM8owJM2pRGqrkYhxJQMDIJnMUoXqrx0xgNXsHWSOim4hV1M_vkxOsmYZpBxpG8w5vtC-soLPS2-olb9uJ5z0BtL52xmU0y8Dj6rUqjfSGY7GrVHm_sdOPjgNBKuY-JFN-Xv-OdxuYWfmRc3G8erROI72S-JsVuhNb3px4apttxB_3y6wosxkJu65ICVWrnMJapy93KrMmAZCMQDbDjKBZ9Et7YUlBQhkqgjA_pf006rq2mwKdzAJILBFMwxz_B_GTfDgiUKQU0CCGq16EfGde3XJTNqmfz_cewd5rtSs0KcCYVwLcACeJAe8nK3NjueLmdiPpaHFr-gBMK_LD0qSaw*1747826501461*7b305f14635635f4096bf9ffa9bf03942836b7913de3bcaf4de0823095784865*WJs7WPvyxLqiejwVUwR-f126czgKiLdJ_r6bjhRs7e4'
{"error":"invalid_grant","error_description":"The mfa_token provided is invalid. Try getting a new token."}