# Mfa association mfa-api with access token vs mfa token approach **URL:** \ **Category:** Get Help\ **Tags:** mfa-api, mfa\ **Created:** [June 25, 2024, 9:23pm UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417 "2024-06-25T21:23:58Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![douglasbr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/douglasbr/32/58091_2.png) [@douglasbr](https://community.auth0.com/u/douglasbr)\ **Post date:** [June 25, 2024, 9:23pm UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/1 "2024-06-25T21:23:58Z")
Hello everyone, I’m currently performing associations following the documentation guidelines: [https://auth0.com/docs/secure/multi-factor-authentication/authenticate-using-ropg-flow-with-mfa/enroll-and-challenge-otp-authenticators#enroll-authenticator](https://auth0.com/docs/secure/multi-factor-authentication/authenticate-using-ropg-flow-with-mfa/enroll-and-challenge-otp-authenticators#enroll-authenticator) Though I have seen this interesting way to perform totp associations, this way it is a little simpler due to the fact that we do not need to have the mfa access token. > [@How to set up MFA TOTP enrollment with MFA API](https://community.auth0.com/t/how-to-set-up-mfa-totp-enrollment-with-mfa-api/85850): > > Problem Statement: How to set up MFA TOTP enrollment with Management API? Solution: Please follow the below steps: 1.Get the refresh token POST ​​https://{YOUR\_DOMAIN}/oauth/token { "grant\_type": "http://auth0.com/oauth/grant-type/password-realm", "client\_id": "YOUR\_CLIENT\_ID", "client\_secret": "YOUR\_CLIENT\_SECRET", "audience": "YOUR\_DOMAIN/mfa/", "username": "USER\_EMAIL OR USERNAME", "password": "USER\_PASSWORD", "scope": "offline\_access", "realm": "Username-Passwor… Following the documentation I obtain the desired results, but I would like to know if the approach carried out without the need for the mfa token still valid. If so, why wouldn’t it be mentioned ? Thanks ---
**Author:** ![dawid.matuszczyk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dawid.matuszczyk/32/74550_2.png) [@dawid.matuszczyk](https://community.auth0.com/u/dawid.matuszczyk)\ **Post date:** [June 26, 2024, 3:45pm UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/2 "2024-06-26T15:45:22Z")
Hi @douglasbr Welcome to the Auth0 Community! Thank you for posting your question. Both options are valid, and probably the only reason that the examples from the Knowledge Solutions are not mentioned in the Docs is that our Documentation mostly primarily focuses on the most common workflows. If that’s something that you think should be included in the Auth0 Documentation, I can talk to the Docs team and ask for details. Thanks Dawid ---
**Author:** ![douglasbr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/douglasbr/32/58091_2.png) [@douglasbr](https://community.auth0.com/u/douglasbr)\ **Post date:** [June 26, 2024, 3:54pm UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/3 "2024-06-26T15:54:34Z")
@dawid.matuszczyk Thanks for the answer, I’m glad to know that this “second option” is a possibility. Regards ! ---
**Author:** ![douglasbr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/douglasbr/32/58091_2.png) [@douglasbr](https://community.auth0.com/u/douglasbr)\ **Post date:** [June 27, 2024, 2:36am UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/4 "2024-06-27T02:36:05Z")
@dawid.matuszczyk In complement, I would like just to mention that by following [Authentication api documentation](https://auth0.com/docs/api/authentication#add-an-authenticator) I could validate the questioned approach, everything worked as well by passing an Access token with enrollment scope to “mfa/associate” endpoint instead of a MFA Token. ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [July 11, 2024, 2:36am UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/5 "2024-07-11T02:36:28Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed. ---
**Author:** ![Tiffani](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tiffani/32/75235_2.png) [@Tiffani](https://community.auth0.com/u/Tiffani)\ **Post date:** [July 29, 2026, 4:52pm UTC](https://community.auth0.com/t/mfa-association-mfa-api-with-access-token-vs-mfa-token-approach/137417/6 "2026-07-29T16:52:58Z")