Hi there, we currently have SMS enabled as a 2nd factor option. However, due to the risks related to SMS we would like to move away from SMS. Therefore I have two questions (which I cannot find in docs & community).
- Is there a mechanism for users only having SMS as second factor to setup a new factor automically (forced)? Of course this can only be done after validating the SMS method.
- Can we disable SMS for a geographical location?
Keen to hear your thoughs!