How to Bulk Import MFA Factors with Voice and SMS Factors

Overview

This article explains how to create distinct ‘voice’ and ‘sms’ factors using the Multi-Factor Authentication (MFA) bulk import feature. The documentation appears to only reference a generic “phone” factor type, raising questions about how to specify either voice or SMS enrollments during the bulk import process.

[
  {
    "user": {
      "email": "user@contoso.com",
      "picture": "http://example.org/jdoe.png",
      "mfa_factors": [
        {
          "phone": {
            "value": "+15551112233"
          }
        }
      ]
    }
  }
]

Applies To

  • Multifactor Authentication
  • Factors

Solution

Creating the ‘voice’ and ‘sms’ factors can be done without adjusting the source JSON. See the steps below to see how to add these factors to the following configuration:

[
  {
    "user": {
      "email": "user@contoso.com",
      "picture": "http://example.org/jdoe.png",
      "mfa_factors": [
        {
          "phone": {
            "value": "+15551112233"
          }
        }
      ]
    }
  }
]

To change the resulting factors that get created on import, please follow these steps

  1. Go to Security > MultiFactor Auth > Phone Message in the Auth0 Tenant dashboard
  2. Change the Phone Message MFA factor configuration before importing the MFA factors (please see the screenshot below of this configuration):
    • Selecting SMS will generate the ‘sms’ factor enrolment only
    • Selecting Voice will generate the 'voice’ factor enrolment only
    • Selecting SMS and Voice will generate both ‘sms’ and ‘voice’ factor enrollments