Overview
This article details which provider argument should be provided when calling api.multifactor.enable() as described in this document.
Applies To
- Multifactor Authentication (MFA)
- Actions MFA
Solution
In most scenarios, use “any” as the provider - this will challenge the user for any of the enabled MFA factors on the tenant.
The other options are provided for primarily legacy purposes:
- “The guardian and google-authenticator options are legacy settings that are kept for backward compatibility reasons and should not be used moving forward. We recommend using
any
instead. The google-authenticator option does not let users enroll a recovery code.” See Customize Multi-Factor Authentication Pages for reference.
If more control is required over which factor is challenged, see the Custrom MFA selection feature (requires New Universal Login):