Please tell me about requiring MFA when logging into the dashboard

[maronn]

Today, when I logged into the Auth0 dashboard, I received a notification stating that it is necessary to enable MFA (Multi-Factor Authentication) from the profile.

Therefore, I have three questions:

1. Is there a URL provided with details about the notification?

2. The MFA settings seem to include only four options shown in the image. Is it not possible to use other methods such as One Time Password?
   

   

3. Will users who already have an account be unable to log in after February 1st if they do not set up MFA?

If anyone knows the answer to any of the above, I would appreciate your comments.

[dan.woda]

Hi @maronn,

Thanks for the questions.

@maronn

Is there a URL provided with details about the notification?

It looks like we don’t currently have any additional public resources about the changes. Was there something specific you are looking for? I’m happy to reach out internally or pass some feedback to the team.

@maronn

The MFA settings seem to include only four options shown in the image. Is it not possible to use other methods such as One Time Password?

Google authenticator and guardian both support OTP.

@maronn

Will users who already have an account be unable to log in after February 1st if they do not set up MFA?

Starting Feb 1st, you will be required to complete MFA to log in, and if you have not set it up you will be prompted to do so.

Let me know if you have any other questions.

[maronn]

Thank you for your response.
I’m very grateful. Many of the questions I had have been resolved.
However, I have an additional question, so I’ll note it here.

I understand that Multi-Factor Authentication (MFA) is mandatory only for users logging into the dashboard, and users of external applications using Auth0’s Universal Login are not required to configure MFA.
Is it correct to assume that users of external applications utilizing Auth0 as an authentication and authorization server, and employing Universal Login as the authentication method in Auth0, will not be affected?

[dan.woda]

@maronn,

Apologies for the delay.

@maronn

Is it correct to assume that users of external applications utilizing Auth0 as an authentication and authorization server, and employing Universal Login as the authentication method in Auth0, will not be affected?

If I understand your question correctly, yes, end users will not be effected by the change in question. This change will impact dashboard tenant members (i.e. admin, editors, viewers, etc.).

[dan.woda]

@maronn,

We just published an additional resource. Let me know if you have any other questions. Thank you!

Action required: Multifactor Authentication (MFA) for Auth0 by Okta Administrators

Hello everyone! As part of Okta’s focus on Identity security, we wanted to share some guidance on implementing industry standards to help keep your dashboard user accounts secure. What is changing? Starting on February 1, 2024, dashboard users for Auth0 Dashboard, Teams, or Auth0 Support Center who use any of the below login methods will be required to complete a Multi-Factor Authentication (MFA) to login to Auth0: Username and password Google social connection LinkedIn social connection Git…