MFA Enrollment Order - Precedence of Factors
Last Updated:
Overview
This article explains why one factor has precedence over another and whether the order can be changed when using multifactor authentication (MFA) enrollment.
- For example, with Push Notifications and Time-based One-Time Passwords (TOTP), the first precedes the second, so the user will be enrolled with Push Notifications.
Applies To
- Multifactor Authentication (MFA)
Solution
A security assessment by Auth0 determined the order of precedence for MFA. This order can be changed by using Actions. Inserting a code like this one will offer users OTP first and then Push Notification:
challengeWith({type:'otp'}, additionalFactors: [{type:'push'}])
