@Sargent_D, Posting here for general visibility as well
The issue we found during our debugging was the –header ‘Content-Type: application/json’
missing in the POST request to /mfa/challenge . It presented because this is currently missing our documentation.
https://auth0.com/docs/mfa/authenticate-with-ropg-and-mfa/enroll-challenge-sms-voice-authenticators#challenge-user-with-otp
It has been requested to be fixed in the docs.