This article details how to get all the Multifactor Authentication (MFA)Enrollments and delete the duplicated or unconfirmed ones.

• Multifactor Authentication (MFA)
• MFA Enrollments
• Delete duplicates

{
        "id": "sms|dev_testid",
        "authenticator_type": "oob",
        "active": false,
        "oob_channel": "sms",
        "name": "XXXXXXXXX5034"
}

Deleting inactive enrollments using the Management API solves this issue:

1. Get the enrollments using the following Endpoint from the MFA API: 

   GET /mfa/authenticators

   Below is a sample response from this endpoint:

     {
       "id":"sms|dev_gB342kcL2K22S4yB",
       "authenticator_type":"oob",
       "oob_channels":"sms",
       "name":"+X XXXX1234",
       "active":true
     },
     {
       "id":"sms|dev_gB342kcL2K22S4yB",
       "authenticator_type":"oob",
       "oob_channels":"sms",
       "name":"+X XXXX1234",
       "active":false
     },

2. Filter the active:false ones and select the enrollment IDs to erase.
3. Delete the authenticators using the following Endpoint from the Management API:

   DELETE  /api/v2/users/{id}/authentication-methods/{authentication_method_id}

NOTE:

• Auth0 returns the unconfirmed authenticators only for the purpose of enrollment (confirming an authenticator). That is why the unconfirmed authenticators are available only via the Enrollment API, which is part of the authentication API.
• The unconfirmed authenticators are unavailable via management API (GET  /api/v2/users/{id}/authentication-methods) because it was designed for a different purpose.

Related References

• List Authenticators using the MFA API
• Delete an Authentication method by ID
• Manage Authentication Methods with Management API