Why SMS Only as option on login

[lihua.zhang]

Hi @jasper1 ,

I understand that you want to implement the scenario that the customers in the US and Canada use SMS and customers in other countries use Email.

Unfortunately, it is not possible to enforce a particular factor for a subset of users.

Since your tenant has MFA factors OTP, Phone, and Email enabled, when a verified user logs in, they will see the option to allow them to try a different factor like the below screen.

Users in other countries can scan the QR code with Google Authenticator and enter the code. Once this is set up, the next time the same user logs in, they can click on the “Try another method” button and choose Email to receive the verification code via email.

Hope this helps! Please let me know if any further queries regarding this.

Ref:

Email MFA Not Visible for Enrolled Users

Problem Statement Email MFA is not showing up in the options, although it is enabled. Steps to reproduce Login Prompted to MFA Try another method and look out for the email factor Cause Email factor has the following requirements: it only works with New Universal Login it needs to be an alternative to other factors it can be activated by users after they complete a second-factor authentication with another method (SMS, Guardian, etc.). It can’t be started first (not a valid 2FA). Additi…

How to enforce a single MFA for a user

Hi @rajivk, Thank you for your response and clarification. Unfortunately, it is not possible to prevent users from enrolling in alternative MFA factors if you have more than one factor enabled. Meaning that it is not possible to enforce a specific factor without providing alternative methods to authenticate with MFA. I hope this answers your questions. Please let me know if you need help with anything else. Thank you.