Error "Webauthn with device biometrics required but not enabled as factor" after Disabling FIDO Authentication

Problem statement

After disabling the MFA factor WebAuthn with FIDO Device Biometrics, logins have started to fail. In the dashboard logs the ‘failed login’ logs have the following error message:

"Webauthn with device biometrics required but not enabled as factor"

Cause

This can occur if Webauthn has been disabled in the MFA settings; however, the setting for the Authentication Profile is still set to ‘Identifier First + Biometrics’.

The Authentication Profile section is located by navigating to the Auth0 Dashboard > Authentication > Authentication Profile.

Solution

Depending on the use case, either re-enable Webauthn in the MFA settings or choose a different option for the Authentication Profile that does not expect device biometrics.