Possibility to Restrict which OTP Authenticator App a User Can Use

Last Updated: Sep 10, 2025

Overview

Hi, when we enable one time password as an MFA option, is it possible to further restrict users to only use specific one time passwords apps? For example, would it be possible to only allow a user to enroll with Microsoft Authenticator?

Applies To

Authentication
OTP

Solution

Restricting authenticator apps is not supported. Auth0's MFA implementation for OTP is based on RFC6238, and third-party authenticator applications that are compliant with RFC 6238 can be used.