Email MFA Factor Missing from Selection Screen

This article explains the specific conditions required for the Email Multi-Factor Authentication (MFA) factor to appear as an available option during the sign-in process. It addresses scenarios where a user may be enrolled in other factors, but does not see the Email option unless specific configurations and user states are met.

• Multi-Factor Authentication (MFA)
• Email MFA
• New Universal Login

The Email factor is hidden by default and becomes available only after a user verifies their email address, updating the email_verified field to true.

Because Email is classified as a knowledge factor rather than a possession factor, it does not utilize an explicit enrollment step. Furthermore, the factor is displayed only if the user has already enrolled in at least one other MFA method during their initial login, and the Show Multi-Factor Authentications options setting is enabled.

To ensure the Email factor is available for selection during the sign-in process, verify the following requirements:

1. Enable at least one other MFA factor, as Email cannot be the sole enabled factor.
2. Ensure that the New Universal Login is used, as this feature is not compatible with the Classic Universal Login. For more details, refer to the Universal Login vs. Classic Login documentation.
3. Verify the user's email address via the Management API, a verification email, or a connection like Google to set the email_verified status to true.
4. Ensure the Show Multi-Factor Authentication options setting is enabled in the configuration. This setting can be found in the Auth0 Dashboard under Security > Multi-factor Auth > Additional Settings.
5. Instruct the user to perform the following steps during their second login:

• 1. Sign in for the first time and enroll with another MFA option.
  2. On the second login, when prompted for MFA, select Try another method to display the full list of available factors.
  3. Select Email from the provided list.