MFA with Authenticator does not work immediately after invite

[stappan]

Thank you for your response. The root cause of this issue had to do with the post-login script being called more than once. We consulted with the support team, who referred us to this:

MFA Once Per Session Action

Problem statement How can we write an MFA Once Per Session Action? Solution /* triggers MFA once per session */ exports.onExecutePostLogin = async (event, api) => { if (!event.authentication.methods.find(({ name }) => name === 'mfa') ) { api.multifactor.enable("any", { allowRememberBrowser: true }); } }; The above can be used to avoid prompting a user for multifactor authentication if they have successfully completed MFA in their current session. This is particularly useful when …

Adding in the condition (to check whether MFA had already been enabled) solved the problem for us.