Identify the Administrator Who Performed an MFA Reset in Auth0

Overview

This article provides instructions for identifying which tenant member initiated a Multi-Factor Authentication (MFA) reset for a user account in the Auth0 Dashboard.

Applies To
  • Auth0
  • Multi-Factor Authentication (MFA) Reset
  • Logs
  • Tenant Admin User Identifiers (IDs)
Solution

To identify the administrator who performed the MFA reset, the tenant logs must be reviewed.

  1. Navigate to Monitoring > Logs in the Auth0 Dashboard.
  2. Search for the event type gd_unenroll.
  3. Examine the log details to locate the administrator's user_id under the details.auth.subject field.

Tenant Logs

 

As of 2026, the Auth0 Dashboard does not display the user identifiers (IDs) of tenant administrators in the Tenant Members section. Administrators can retrieve this information by following these steps.

  1. Enable Developer Tools in the browser.
  2. Navigate to Tenant Settings, and then choose Tenant Members.
  3. Review the response payload for the GET /api/authz-tenant-members API call in the network traces to locate the user IDs for each tenant administrator.

Tennant Settings

Recommended content

No recommended content found...