Auth0 MFA API

Describes the Auth0 MFA API which allows you to enroll and manage MFA for users.

Auth0 provides a built-in multi-factor authentication (MFA) enrollment and authentication flow using Universal Login. Use the MFA API in the following scenarios if you want to:

• Authenticate users with the Resource Owner Password Grant.
• Build an interface to let users manage their own authentication factors.

To use the MFA API, you must enable the MFA grant type for your application. To enable the MFA grant in the Auth0 Dashboard, go to Dashboard > Applications > Advanced Settings > Grant Types and select MFA. See Enable Multi-Factor Authentication for details.

Limitations

The MFA API is designed to work with SMS, Voice, push via the Auth0 Guardian app, email, and OTP factors. It does not currently support enrolling with Duo or WebAuthn.

Learn more

• Customize Multi-Factor Authentication Pages
• Authenticate Using the Resource Owner Password Flow with MFA
• Multi-Factor Authentication Developer Resources
• Create Custom Enrollment Tickets