How to change the MFA method?

[jboulevart]

Hello, I want to do something, I don’t know if it is possible. I want to allow our customers to update their mfa method from their profile page.

Where would I start if I wanted to implement such a feature? Thanks in advance for any help.

[tyf]

Hey there @jboulevart!

This is possible using either the Authentication API or the Management API:

Manage Authentication Factors with APIs

[jboulevart]

Okay I have tried a lot of things, but I do not get how to get an mfa access token send it for using the Authentication API.

The users logged in the application using the Universal login, but once in the app, how do I a new token with the appropriate scopes?

[tyf]

Sorry for the delayed response here, but wanted to loop back on this one.

@jboulevart

The users logged in the application using the Universal login, but once in the app, how do I a new token with the appropriate scopes?

You have 2 options:

1. Configure silent auth to request an access token with the MFA API audience and enroll scope. Once they’ve completed MFA related actions you will want to perform silent auth once again in order continue normal operations with the originally requested API audience.
2. In my opinion the easier option - Use the Management API to proxy requests through a backend. Similar (albeit different use case) to what is outlined here:

Enabling Users to Change their Email Address from a SPA or Native App

Last Updated: Aug 8, 2024 Overview This article provides details on how to enable users to change their email address from a SPA or native app. Applies To SPA Native App Email address Solution Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients m…