Auth0 provides a built-in multi-factor authentication (MFA) enrollment and authentication flow using Universal Login. Use the MFA API in the following scenarios if you want to:

To use the MFA API, you must enable the MFA grant type for your application. To enable the MFA grant in the Auth0 Dashboard, go to Dashboard > Applications > Advanced Settings > Grant Types and select MFA. See Enable Multi-Factor Authentication for details.


The MFA API is designed to work with SMS, Voice, push via the Auth0 Guardian app, email, and OTP factors. It does not currently support enrolling with Duo or WebAuthn.

Learn more