Multi-factor Authentication changes in logs

[emiel]

Hi there,

Is there a way to see which Tenant Member enabled or disabled which Multi-factor Authentication factor in this list?

Some factors were just disabled all of a sudden in our tenant. I would like to find out who did that.

Kind regards,

Emiel

[lihua.zhang]

Hi @emiel ,

Welcome to Auth0 Community!

The details can be found under Monitoring → Logs. Please look for the log with description “Update a Multi-factor Authentication Factor”. Under the details of the log, you may find the email of the user who made the change.

Hope it helps!

[emiel]

Hello @lihua.zhang ,

Thanks for your solution.
I found the respective item in the filter

The strange thing however is that when selecting this filter, three items were shown in the search results (two of which were recorded yesterday) but when I click these items I get an error.

I reopened Monitoring, Logs again, applied the MFA Settings Update filter again and now I see only one item in the search result.

The other two I did see a moment ago but gave an error when opening, are now gone.