MFA for Social Sign-in

[joseantonio.rey]

Hey @jon6 - welcome to the Auth0 Community!

The ROPG works for when the password is located in the authorization server - in this case, Auth0. For Social connections, we do not have the password, but rather request the external identity provider to do the verification for us.

I recently wrote a post about this, maybe it can provide some further explanation on why this is not possible:

Authentication API and Enterprise ADFS

Hi @nbarbas - welcome to the Auth0 Community! First of all, I would like to thank you for being very thorough in explaining what you are doing and what you are trying to achieve. This helps us a lot to provide you with an answer relevant to you. Now, to the technical details! To explain what’s happening and what you are seeing, I think it’s good to explain what you are executing. When you use the /oauth/token endpoint with grant_type=password, you are executing a Resource-Owner Password Grant…

Let me know if this helps!