# \#adaptive-mfa **URL:** https://community.auth0.com/tag/adaptive-mfa/1623.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Adaptive MFA Blocking Apple App Store Review](https://community.auth0.com/t/adaptive-mfa-blocking-apple-app-store-review/203658)
**Author:** [@Alois.Goeth](https://community.auth0.com/u/Alois.Goeth)\ **Replies:** 1\ **Last updated:** [September 25, 2026, 11:18pm UTC](https://community.auth0.com/t/adaptive-mfa-blocking-apple-app-store-review/203658 "2026-09-25T23:18:52Z")
Hi, we have enabled Adaptive MFA for our application. We are currently submitting the app for review in the Apple App Store, and Apple’s review team is using a dedicated test account that we have provided. During the r… --- ## [MFA empty location\_info ](https://community.auth0.com/t/mfa-empty-location-info/199832)
**Author:** [@sasee.venkata](https://community.auth0.com/u/sasee.venkata)\ **Replies:** 1\ **Last updated:** [May 11, 2026, 8:32pm UTC](https://community.auth0.com/t/mfa-empty-location-info/199832 "2026-05-11T20:32:18Z")
Hi Auth0 Support Team, We are integrating Auth0 Log Streams with AWS EventBridge to capture authentication and MFA events for security alerting. We observed that the Auth0 Dashboard UI displays geolocation details such… --- ## [User property multifactor\_last\_modified not found in Action event](https://community.auth0.com/t/user-property-multifactor-last-modified-not-found-in-action-event/197236)
**Author:** [@bastien.monsarrat](https://community.auth0.com/u/bastien.monsarrat)\ **Replies:** 2\ **Last updated:** [February 13, 2026, 9:34am UTC](https://community.auth0.com/t/user-property-multifactor-last-modified-not-found-in-action-event/197236 "2026-02-13T09:34:42Z")
Hello, I have been trying to implement a way to force a new MFA enrollment on next login after an MFA Reset. The only two ways we have found is either : :cross\_mark: Force the MFA everytime → Not something we want t… --- ## [ACUL js files not built in correct format](https://community.auth0.com/t/acul-js-files-not-built-in-correct-format/196310)
**Author:** [@daenzer.gabriel](https://community.auth0.com/u/daenzer.gabriel)\ **Replies:** 6\ **Last updated:** [January 16, 2026, 4:19pm UTC](https://community.auth0.com/t/acul-js-files-not-built-in-correct-format/196310 "2026-01-16T16:19:20Z")
I am building the acul react boilerplate app and have configured my tenant through the management API to call out for the file \\assets\\login\\index.js in my static folder. I see the request for the file come through my br… --- ## [Risk assessment during refresh token login (Success Refresh Token Exchange) sertft event](https://community.auth0.com/t/risk-assessment-during-refresh-token-login-success-refresh-token-exchange-sertft-event/189814)
**Author:** [@ashish.jamthe1](https://community.auth0.com/u/ashish.jamthe1)\ **Replies:** 1\ **Last updated:** [July 31, 2025, 3:33pm UTC](https://community.auth0.com/t/risk-assessment-during-refresh-token-login-success-refresh-token-exchange-sertft-event/189814 "2025-07-31T15:33:56Z")
We have enabled Adaptive MFA and customise it through actions. We have noticed that we get the riskAssessment object during username-password login (PKCE) via Auth0 login dashboard. But we do not get riskAssessment obje… --- ## [Silent Authentication not working in MFA enabled session](https://community.auth0.com/t/silent-authentication-not-working-in-mfa-enabled-session/189542)
**Author:** [@Gokulanathan.R](https://community.auth0.com/u/Gokulanathan.R)\ **Replies:** 1\ **Last updated:** [July 24, 2025, 4:50pm UTC](https://community.auth0.com/t/silent-authentication-not-working-in-mfa-enabled-session/189542 "2025-07-24T16:50:35Z")
I have implemented MFA with email challenge in post action login. When user refresh the browser, React auth0 component method getTokenSilently() throws exception that ‘Error fetching access token: Fm: Multifactor authe… --- ## [Review and feedback of our implementation of Adaptive MFA](https://community.auth0.com/t/review-and-feedback-of-our-implementation-of-adaptive-mfa/188632)
**Author:** [@ammo](https://community.auth0.com/u/ammo)\ **Replies:** 1\ **Last updated:** [July 1, 2025, 6:45pm UTC](https://community.auth0.com/t/review-and-feedback-of-our-implementation-of-adaptive-mfa/188632 "2025-07-01T18:45:11Z")
Hi everyone, I’d welcome your thoughts on my Auth0 MFA implementation. Below is some background, the details of our approach and the code for my Post-Login Action. Any feedback—on logic, policy choices, code style or ed… --- ## [Enforcing adaptive MFA per organisation via post-login action](https://community.auth0.com/t/enforcing-adaptive-mfa-per-organisation-via-post-login-action/188070)
**Author:** [@ammo](https://community.auth0.com/u/ammo)\ **Replies:** 3\ **Last updated:** [June 17, 2025, 5:31pm UTC](https://community.auth0.com/t/enforcing-adaptive-mfa-per-organisation-via-post-login-action/188070 "2025-06-17T17:31:43Z")
Hi, I’m using Auth0 Actions to enforce MFA on a per-organisation basis. For the “Always” policy, the following Post-Login Action works as expected: api.multifactor.enable('any', { allowRememberBrowser: true }); What I… --- ## [How is the riskAssessment overall confidence evaluated](https://community.auth0.com/t/how-is-the-riskassessment-overall-confidence-evaluated/186992)
**Author:** [@ashish.jamthe1](https://community.auth0.com/u/ashish.jamthe1)\ **Replies:** 1\ **Last updated:** [May 22, 2025, 12:49pm UTC](https://community.auth0.com/t/how-is-the-riskassessment-overall-confidence-evaluated/186992 "2025-05-22T12:49:46Z")
I have toggled on the “Enable Adaptive MFA Risk assessment” switch in the " Multi-factor Authentication" section of my tenancy. As a result, I have started getting the riskAssessment object in my logs. I notice that the … --- ## [Testing Adaptive MFA](https://community.auth0.com/t/testing-adaptive-mfa/186354)
**Author:** [@ashish.jamthe1](https://community.auth0.com/u/ashish.jamthe1)\ **Replies:** 1\ **Last updated:** [May 6, 2025, 1:02pm UTC](https://community.auth0.com/t/testing-adaptive-mfa/186354 "2025-05-06T13:02:28Z")
Help required with simulating low confidence for adaptive MFA We are trying to turn on Adaptive MFA for a certain user types, for which we have to customize Adaptive MFA. We are essentially going to check for the out o… --- ## [Full list of denied or blacklisted IPs](https://community.auth0.com/t/full-list-of-denied-or-blacklisted-ips/185430)
**Author:** [@tech18](https://community.auth0.com/u/tech18)\ **Replies:** 3\ **Last updated:** [April 17, 2025, 3:32pm UTC](https://community.auth0.com/t/full-list-of-denied-or-blacklisted-ips/185430 "2025-04-17T15:32:09Z")
Hi Auth0 Support, I hope you’re doing well. We would like to request the list of IP addresses that have been denied access by Auth0, either due to rate limiting, failed login thresholds, or VPN/proxy detection (if appl… --- ## [Disabling MFA using Actions not working as expected](https://community.auth0.com/t/disabling-mfa-using-actions-not-working-as-expected/184793)
**Author:** [@michal.k](https://community.auth0.com/u/michal.k)\ **Replies:** 1\ **Last updated:** [March 31, 2025, 8:02pm UTC](https://community.auth0.com/t/disabling-mfa-using-actions-not-working-as-expected/184793 "2025-03-31T20:02:27Z")
Ready to post? :magnifying\_glass\_tilted\_left: First, try searching for your answer. Hello, Expectation We would like to have Adaptive MFA configured for all users with OTP and Email as enrollment options. We would like… --- ## [Is there a way to set Adaptive MFA in Auth0 (CIC) to demand MFA after a fixed elapsed time?](https://community.auth0.com/t/is-there-a-way-to-set-adaptive-mfa-in-auth0-cic-to-demand-mfa-after-a-fixed-elapsed-time/182960)
**Author:** [@kpaynter](https://community.auth0.com/u/kpaynter)\ **Replies:** 1\ **Last updated:** [February 27, 2025, 9:01pm UTC](https://community.auth0.com/t/is-there-a-way-to-set-adaptive-mfa-in-auth0-cic-to-demand-mfa-after-a-fixed-elapsed-time/182960 "2025-02-27T21:01:48Z")
Ready to post? I have an Auth0 (CIC) tenant and I want to use Adaptive MFA. I need a setting where I want MFA to reauthenticate every 30 days regardless of other adaptive MFA settings.:mag: First, try searching for your … --- ## [Do Refresh Tokens trigger aMFA checks](https://community.auth0.com/t/do-refresh-tokens-trigger-amfa-checks/157665)
**Author:** [@skatanski](https://community.auth0.com/u/skatanski)\ **Replies:** 6\ **Last updated:** [December 23, 2024, 3:44pm UTC](https://community.auth0.com/t/do-refresh-tokens-trigger-amfa-checks/157665 "2024-12-23T15:44:39Z")
Hi! If invalid travel adaptive MFA check is enabled for a given client. Does it also impact refresh tokens? Lets consider following scenario: a webapp is using access tokens, refresh token and a session cookie refres… --- ## [Disable MFA for some logins for a user](https://community.auth0.com/t/disable-mfa-for-some-logins-for-a-user/88513)
**Author:** [@rajivk](https://community.auth0.com/u/rajivk)\ **Replies:** 3\ **Last updated:** [November 18, 2024, 10:38pm UTC](https://community.auth0.com/t/disable-mfa-for-some-logins-for-a-user/88513 "2024-11-18T22:38:56Z")
On first login, we want the users to follow custom MFA(through redirection in login action). After that we want to enforce auth0 MFA. So when users login first time, we do not want Auth0 mfa to kick in. We have setup MFA… --- ## [I am Okta administrator and lost my mobile where I have installed auth0 need MFA reset](https://community.auth0.com/t/i-am-okta-administrator-and-lost-my-mobile-where-i-have-installed-auth0-need-mfa-reset/136737)
**Author:** [@sairam.sairam](https://community.auth0.com/u/sairam.sairam)\ **Replies:** 1\ **Last updated:** [June 20, 2024, 3:39pm UTC](https://community.auth0.com/t/i-am-okta-administrator-and-lost-my-mobile-where-i-have-installed-auth0-need-mfa-reset/136737 "2024-06-20T15:39:27Z")
Ready to post? :mag: First, try searching for your answer. Hi Team, I am Okta administrator and I have enrolled to auth0 MFA, I lost my device and I am unable to login to okta support, need MFA reset, could you please … --- ## [Logins\_count is undefined](https://community.auth0.com/t/logins-count-is-undefined/133171)
**Author:** [@ysharat](https://community.auth0.com/u/ysharat)\ **Replies:** 3\ **Last updated:** [May 17, 2024, 6:25pm UTC](https://community.auth0.com/t/logins-count-is-undefined/133171 "2024-05-17T18:25:33Z")
while am printing logins\_count am getting undefined why is that so i have logged many times but still it shows undefined?what i was trying to do if last login is over 40 days want to trigger MFA. const logins\_count= eve… --- ## [Using Last Logine Timestamp](https://community.auth0.com/t/using-last-logine-timestamp/112320)
**Author:** [@sascha.martin](https://community.auth0.com/u/sascha.martin)\ **Replies:** 1\ **Last updated:** [July 28, 2023, 7:09pm UTC](https://community.auth0.com/t/using-last-logine-timestamp/112320 "2023-07-28T19:09:05Z")
Hello Community, i have the issue that the 30 day remember not work in all applications well. I using Adaptive-MFA. Means that I get no new MFA enroll. I tried a lot but nothing bring me finish this issue. I want to wri… --- ## ["MFA every X days" without Adaptive MFA](https://community.auth0.com/t/mfa-every-x-days-without-adaptive-mfa/111811)
**Author:** [@markd](https://community.auth0.com/u/markd)\ **Replies:** 1\ **Last updated:** [July 24, 2023, 6:28pm UTC](https://community.auth0.com/t/mfa-every-x-days-without-adaptive-mfa/111811 "2023-07-24T18:28:45Z")
I’m trying to figure out how to write an Action (or Rule if necessary) that implements the following logic: if new device: require mfa else if last MFA was more than 7 days ago: require mfa The gist: require the us… --- ## [MFA SMS - Failed to send](https://community.auth0.com/t/mfa-sms-failed-to-send/106766)
**Author:** [@damikun](https://community.auth0.com/u/damikun)\ **Replies:** 2\ **Last updated:** [May 12, 2023, 1:05pm UTC](https://community.auth0.com/t/mfa-sms-failed-to-send/106766 "2023-05-12T13:05:20Z")
I created Trial account to test MFA features because we need working example before committing any plan… I enabled enable MFA and SMS version… When i run my App and on Login im redirected to Auth0 login it require to e… --- ## [Disable MFA based on IP allow list](https://community.auth0.com/t/disable-mfa-based-on-ip-allow-list/104957)
**Author:** [@emiel](https://community.auth0.com/u/emiel)\ **Replies:** 1\ **Last updated:** [April 18, 2023, 10:33am UTC](https://community.auth0.com/t/disable-mfa-based-on-ip-allow-list/104957 "2023-04-18T10:33:29Z")
Hi there, Currently we are using a Rule that checks for user\_metadata to determine if MFA needs to be disabled for a specific user. Does Auth0 support something like that based on IP allow listing. If this requires cus… --- ## [Is it possible to perform step up authentication with out user credentials?](https://community.auth0.com/t/is-it-possible-to-perform-step-up-authentication-with-out-user-credentials/103169)
**Author:** [@kevin\_herrera\_vega](https://community.auth0.com/u/kevin_herrera_vega)\ **Replies:** 1\ **Last updated:** [March 28, 2023, 9:38pm UTC](https://community.auth0.com/t/is-it-possible-to-perform-step-up-authentication-with-out-user-credentials/103169 "2023-03-28T21:38:00Z")
I have an app that uses universal login, that means that users do not enter their credentials in the app for login. I wanna perform step up authentication for certain operations, but due to universal login, I don’t have … --- ## [How can I know if MFA is enabled on my app and which factors are enabled using actions?](https://community.auth0.com/t/how-can-i-know-if-mfa-is-enabled-on-my-app-and-which-factors-are-enabled-using-actions/86555)
**Author:** [@lucas.gonzalez](https://community.auth0.com/u/lucas.gonzalez)\ **Replies:** 4\ **Last updated:** [July 8, 2022, 5:18pm UTC](https://community.auth0.com/t/how-can-i-know-if-mfa-is-enabled-on-my-app-and-which-factors-are-enabled-using-actions/86555 "2022-07-08T17:18:32Z")
I’m working on an action that needs to check if the APP has MFA enabled and if there’s any factor enabled on my app. I want to check this at the APP level, doesn’t matter if the user has enrolled in MFA yet. Basically … --- ## [Switching between MFA's](https://community.auth0.com/t/switching-between-mfas/85294)
**Author:** [@sishwarya10](https://community.auth0.com/u/sishwarya10)\ **Replies:** 3\ **Last updated:** [June 30, 2022, 5:13pm UTC](https://community.auth0.com/t/switching-between-mfas/85294 "2022-06-30T17:13:47Z")
Hi Team, Is there any way to allow the user to switch between MFA’s after completing signup with one of the MFA’s. For example while signup let’s assume that the user enrolled in Google authenticator and after sometime…