Our existing app provides an option to change mobile number for users. If we patch the user with management API with new mobile number, is there a way to trigger mobile verification process with Auth0?
Also how can users manage their profile information, their MFA preference and reset devices? Does Auth0 have an UI for these features or the preference is to build custom UI around mangement APIs?
When you patch a user’s standard profile phone_number via the Auth0 Management API (PATCH /api/v2/users/{id}), there is no native, automatic trigger in Auth0 that will instantly send an out-of-the-box SMS verification code to verify that number.
If you are using the standard Auth0 phone/SMS verification, it is designed to be triggered naturally the next time the user logs in under a MFA-challenge scenario or via a Passwordless SMS flow.
The official recommendation would be to set a flag on user’s profile in order to trigger the MFA during their next login attempt.
There is also the option to trigger a verification for the user post-patch by redirecting the user to a custom page where you will Add Step-Up Authentication using their new phone number.
Moving forward, in order for an user to manage their profile through your application, Auth0 does not offer a dedicated UI to be integrated directly. You will need to build custom UI which will leverage the Management API in your back-end in order to perform these kind of updates on the user’s behalf.
Kind Regards,
Nik