Rule after successful MFA

[rodrigo.arias]

Hi,
I’m using a custom MFA rule in which I return the context object with a multifactor challenge.
I want to add a following rule, but I’m not sure if that rule would be executed after the user has succesfully acomplished the multifactor or not. (That would be the desired behaviour, I want to execute a last rule knowing that the MFA has been completed).

[crawford.king]

I also have this question. Any insights would be much appreciated!

My use case involves storing a custom field in user metadata if MFA is successful.

[tyf]

Hey there @crawford.king! (Sorry for the lack of response @rodrigo.arias)

Please see the following post:

Update user metadata after MFA completion

Hi there @hunter1! Unfortunately as you’ve noticed MFA does not complete until after Actions/Rules have executed - It’s outside the scope of an Action, but you could potentially look at ID token claims to see if MFA was performed, or add a claim to an access token to indicate that MFA was required for a given login and go about it that way. An ID token returned after a login requiring MFA will contain both the acr and amr claims: [Screenshot 2023-03-14 at 4.12.47 PM] Hope this helps!

Hope this helps!