I have the below code in Post login Action:
const hasWebAuthn = enrolledFactors.some(f => f.type === ‘webauthn-platform’);
if (hasWebAuthn) {
// Challenge with WebAuthn
console.log(‘webauthn-platform challenge’);
api.authentication.challengeWith({ type: ‘webauthn-platform’ });
} else {
// Enroll with WebAuthn
console.log(‘webauthn-platform enable’);
api.authentication.enrollWith({ type: ‘webauthn-platform’ });
}
As seen above, its pretty straightforward. But I would like to understand why when enrollWith runs, the options of Skip or Remind me later doesn’t show up. When MFA actions isn’t enabled, then the default biometric template shows the options.
Am i missing any other configuration? Please help.
Thanks!
Hi @vaishnavi.santhosh,
Welcome to the Auth0 Community!
This is actually the expected outcome in both scenarios, as I have tested this as well.
The reason why you are observing this behavior when enabling MFA via the Dashboard is because the WebAuthn with Device Biometrics for MFA can not be used as a stand alone MFA factor, so users must first enroll in a “traditional” method such as an Authenticator App or SMS. Auth0 tries asking users to “Log in faster on this device” after they’ve already completed another MFA factor (like SMS), thus the “Remind me later” option.
As described in the above mentioned documentation:
When you enable WebAuthn with Device Biometrics, Auth0 will try to progressively enroll all of an end-user’s WebAuthn-capable devices.
This outlines the Progressive Enrollment process, while this MFA factor is an optional addition in the meantime.
On the other hand, when using Actions for enabling MFA for your users, the api.authentication.enrollWith() type methods explicitly enforce users to go through the specified MFA factor. Given that the system treats it as a mandatory instruction, the users can not choose to “Skip” this step.
A related article on the matter could be this one - Making MFA Enrollment Optional.
I hope this helps and if you have further questions please let me know.
Best regards,
Remus