Identify the Administrator Who Performed an MFA Reset in Auth0
May 15, 2026
Overview
This article provides instructions for identifying which tenant member initiated a Multi-Factor Authentication (MFA) reset for a user account in the Auth0 Dashboard.
Applies To
- Auth0
- Multi-Factor Authentication (MFA) Reset
- Logs
- Tenant Admin User Identifiers (IDs)
Solution
To identify the administrator who performed the MFA reset, the tenant logs must be reviewed.
- Navigate to Monitoring > Logs in the Auth0 Dashboard.
- Search for the event type
gd_unenroll. - Examine the log details to locate the administrator's
user_idunder thedetails.auth.subjectfield.
As of 2026, the Auth0 Dashboard does not display the user identifiers (IDs) of tenant administrators in the Tenant Members section. Administrators can retrieve this information by following these steps.
- Enable Developer Tools in the browser.
- Navigate to Tenant Settings, and then choose Tenant Members.
- Review the response payload for the
GET /api/authz-tenant-membersAPI call in the network traces to locate the user IDs for each tenant administrator.