Error "This application has MFA grants enabled. These grants are currently not supported when the application is accessed by team members of organizations"

[auth0.knowledge3]

Overview

A tenant admin cannot invite members to an organization when the target application has the MFA grants enabled. In the target application, under the Organizations tab, the tenant admin cannot choose Both when defining the type of users that will log into the application because this option cannot be enabled for organization team members. Only Individuals can be selected under Type of Users since only these users may sign up and access the application directly.

Applies To

• Tenant Admins
• Organizations
• Types of Users
• MFA Grants
• MFA Grants Error

Cause

MFA grants are enabled. These grants are currently not supported when the application is accessed by team members of organizations.

Solution

1. In the Auth0 dashboard, go to Application > Application and click on the target application to open it.
2. Go to the application in the Organizations tab.
3. Click Disable Grants Now. Then click on Confirm.
   
   
4. Alternatively, disable the MFA grant by going to the app’s Settings > Advanced Settings > Grant Types tab, clearing the checkbox next to MFA, and clicking Save Changes.
   
   
5. Go back to the app’s Organizations tab. Now, Both under Types of users can be enabled, so select it and click Save Changes.