Differences Between title/altTitle and description/altDescription in Auth0 mfa-webauthn Prompt

altTitle / altDescription are shown when device-biometrics enrollment is required by a Post-Login Action; title / description are shown otherwise.

• Auth0
• Universal Login
• Multi-Factor Authentication (MFA)

What are the differences between the title/altTitle and description/altDescription fields?

Auth0 displays the title and description fields when the enrollment is driven by the tenant's MFA policy (for example, "Require Multi-factor Auth = Always") or by progressive enrollment.  Auth0 displays the altTitle and altDescription fields when the WebAuthn enrollment was required by a Post-Login Action. Accurately, altTitle / altDescription are shown when device-biometrics enrollment is required by a Post-Login Action; title / description are shown otherwise.

This alt/non-alt pair exists only for the mfa-webauthn-platform-enrollment screen (device biometrics). Other WebAuthn screens do not have alt variants.

What steps verify the title and description display?

Configure the Multi-factor Authentication (MFA) settings and perform a login to verify the optional WebAuthn enrollment screen.

1. Navigate to Security, select Multi-factor Auth.
2. Enable any independent factor and WebAuthn with FIDO Device Biometrics.
   NOTE: Auth0 prevents enabling WebAuthn with FIDO Device Biometrics independently and requires enabling another factor, like One-time Password.
3. Navigate to the Define policies and set the Require Multi-factor Auth policy to Always.
4. Authenticate via the Universal Login prompt using an email address and password, followed by the selected independent factor authentication.
5. Observe the subsequent screen to view the configured title and description text.

What steps verify the altTitle and altDescription display?

Enforce enrollment through a Post-Login Action to verify the mandatory WebAuthn enrollment screen.

1. Ensure the MFA settings match the configuration used for verifying the title and description fields.
2. Create a Post-Login Action and insert the following sample code to enforce WebAuthn enrollment.

   • Sample code:

     api.authentication.enrollWith({ type: 'webauthn-platform' });
     // or, for an already-enrolled user:
     api.authentication.challengeWith({ type: 'webauthn-platform' });

3. Authenticate via the Universal Login prompt using an email address and password with a user that does not have MFA enrolled.
4. Observe the subsequent screen to view the configured altTitle and altDescription text.