# Grant type 'https://auth0.com/oauth/grant-type/mfa-otp' not allowed for the client **URL:** \ **Category:** Get Help\ **Created:** [April 20, 2022, 9:52am UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050 "2022-04-20T09:52:02Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![heylexey](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/heylexey/32/36736_2.png) [@heylexey](https://community.auth0.com/u/heylexey)\ **Post date:** [April 20, 2022, 9:52am UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050/1 "2022-04-20T09:52:02Z")
Hi all. I have a problem with Confirm OTP enrollment. It’s says ` "error": "unauthorized_client", "error_description": "Grant type 'https://auth0.com/oauth/grant-type/mfa-otp' not allowed for the client.", "error_uri": "https://auth0.com/docs/clients/client-grant-types"` Also client settings. Any suggestions? ![image](https://global.discourse-cdn.com/auth0/original/3X/a/5/a5deaca40b9b348675eb965891a75519b23fc404.png) ---
**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\ **Post date:** [April 21, 2022, 12:39am UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050/4 "2022-04-21T00:39:48Z")
Hi there @heylexey welcome to the community! > [@heylexey](#): > > Also client settings. Any suggestions? What type of application are you working with? I’ve seen this error before when attempting to use a SPA app for example, but the settings look to be from a non-SPA app as `Passwordless OTP` isn’t an option for a SPA app. Let us know! ---
**Author:** ![heylexey](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/heylexey/32/36736_2.png) [@heylexey](https://community.auth0.com/u/heylexey)\ **Post date:** [April 21, 2022, 7:51am UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050/5 "2022-04-21T07:51:00Z")
Hi @ty.frith. Thank you for your answer. Type is Regular Web Application ---
**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\ **Post date:** [April 22, 2022, 6:35pm UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050/6 "2022-04-22T18:35:26Z")
Thanks for confirming! I just ran through this flow with a test Web Application of mine set to the same settings, but was unable to reproduce. I did this manually following [this](https://auth0.com/docs/secure/multi-factor-authentication/authenticate-using-ropg-flow-with-mfa/enroll-and-challenge-otp-authenticators#get-mfa-token) article. I’m wondering if the `grant_type` value itself is to blame - What happens if you set the `grant_type` to `http://auth0.com/oauth/grant-type/mfa-otp` as opposed to `https://auth0.com/oauth/grant-type/mfa-otp`? FWIW, I did some research and it seems this error can come up if there is a typo as well. A bit misleading given the error itself is so specific, but worth a shot! Let us know! ---
**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\ **Post date:** [May 25, 2022, 11:27pm UTC](https://community.auth0.com/t/grant-type-https-auth0-com-oauth-grant-type-mfa-otp-not-allowed-for-the-client/82050/7 "2022-05-25T23:27:28Z")