Which Provider Can Be Used with api.multifcator.enable() in Post-Login Actions

Overview

This article details which provider argument should be provided when calling api.multifactor.enable() as described in this document.

Applies To

  • Multifactor Authentication (MFA)
  • Actions MFA

Solution

In most scenarios, use “any” as the provider - this will challenge the user for any of the enabled MFA factors on the tenant.

The other options are provided for primarily legacy purposes:

  • “The guardian and google-authenticator options are legacy settings that are kept for backward compatibility reasons and should not be used moving forward. We recommend using any instead. The google-authenticator option does not let users enroll a recovery code.” See Customize Multi-Factor Authentication Pages for reference.

If more control is required over which factor is challenged, see the Custrom MFA selection feature (requires New Universal Login):

Related References