Auth0 Home Blog Docs

Programatically Reset End User MFA

I’m working on integrating one of our traditional web apps with Auth0 using Universal Login. It’s desirable that we have MFA enabled for our users, but the people managing our users do not have access to the Auth0 console (they instead work through an in-house service that leverages the Management API).

One of the support requests we’re anticipating is users that lose their MFA device and recovery code. I know that there is a way to reset a user’s MFA configuration through the Auth0 console, but I haven’t been able to track down an equivalent operation in the Management API, and it doesn’t seem like the MFA API applies to administration of users at this level (I could be wrong).

Is there a recommended way for a user with administrative credentials to reset MFA for a user without having to go to the Auth0 console in a browser?