# Question about tying login account to specific mobile device

**URL:** <https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079>\
**Category:** Get Help\
**Tags:** android, mobile, auth0, login, ios\
**Created:** [March 25, 2021, 7:42pm UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079 "2021-03-25T19:42:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mohammadz](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mohammadz/32/13482_2.png) [@mohammadz](https://community.auth0.com/u/mohammadz)\
**Post date:** [March 25, 2021, 7:42pm UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079/1 "2021-03-25T19:42:09Z")

</div>

Hi,

I have a really specific question for mobile. Does the auth0 platform have the capability to associate user crendentials and profile to a specific mobile device? So 1 user account is associated to 1 user device. So if third-party happens to learn about info regarding user’s account, they can’t login because it’s tied to the account owner’s device.

Is this even possible? I’m just curious.

Mohammad

---

<div class="post-metadata">

**Author:** ![stephanie.chamblee](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stephanie.chamblee/32/26087_2.png) [@stephanie.chamblee](https://community.auth0.com/u/stephanie.chamblee)\
**Post date:** [March 26, 2021, 11:28am UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079/3 "2021-03-26T11:28:35Z")

</div>

Hi @mohammadz,

This sounds similar to [MFA](https://auth0.com/intro-to-iam/what-is-multifactor-authentication-mfa/).

When your Auth0 tenant is configured to use MFA, users must register their device to prove who they are not only by what they know (username/password) but also by what they own (their phone).

_Example user enrolled in MFA:_

 ![screenshot-manage.auth0.com-2021.03.26-07_23_15](https://global.discourse-cdn.com/auth0/original/3X/f/6/f615771567a81aab960e2907b6ea05851322d507.png)

You might find this article helpful: [Multi-factor Authentication Guide](https://auth0.com/blog/multifactor-authentication-mfa/).

---

<div class="post-metadata">

**Author:** ![mohammadz](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mohammadz/32/13482_2.png) [@mohammadz](https://community.auth0.com/u/mohammadz)\
**Post date:** [March 26, 2021, 6:12pm UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079/4 "2021-03-26T18:12:16Z")

</div>

Hi @stephanie.chamblee,

Thanks for the information.  
So if I were to implement this, would there be information for me to use in the rules section for custom policy?  
Like mobile specific information about the device, some id or other metadata.  
Would this be possible? Just curious.

---

<div class="post-metadata">

**Author:** ![stephanie.chamblee](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stephanie.chamblee/32/26087_2.png) [@stephanie.chamblee](https://community.auth0.com/u/stephanie.chamblee)\
**Post date:** [March 26, 2021, 7:11pm UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079/5 "2021-03-26T19:11:01Z")

</div>

The user agent and IP is available in the [context object](https://auth0.com/docs/rules/context-object), and you can see what multifactor provider the user is enrolled with using the [user object](https://auth0.com/docs/rules/user-object-in-rules), but I don’t believe an ID associated with multifactor is available from the rule.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 10, 2021, 7:11pm UTC](https://community.auth0.com/t/question-about-tying-login-account-to-specific-mobile-device/60079/6 "2021-04-10T19:11:24Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
