How to change the MFA method?

[tyf]

Sorry for the delayed response here, but wanted to loop back on this one.

@jboulevart

The users logged in the application using the Universal login, but once in the app, how do I a new token with the appropriate scopes?

You have 2 options:

1. Configure silent auth to request an access token with the MFA API audience and enroll scope. Once they’ve completed MFA related actions you will want to perform silent auth once again in order continue normal operations with the originally requested API audience.
2. In my opinion the easier option - Use the Management API to proxy requests through a backend. Similar (albeit different use case) to what is outlined here:

Enabling Users to Change their Email Address from a SPA or Native App

Last Updated: Aug 8, 2024 Overview This article provides details on how to enable users to change their email address from a SPA or native app. Applies To SPA Native App Email address Solution Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients m…