If you want to enable MFA from our extensibility platform, you’ll be able to consider how users authenticated to decide if they should be prompted for MFA or not. When users authenticate using WebAuthn Biometrics as their only authentication method, the amr value in the ID Token will be set to mfa.
The next time they log in, they can log in with password + another authentication method or with device biometrics. Optionally enroll with Device Biometrics. When MFA is enabled and users create a new account, they will:Įnroll in MFA, with a non-biometrics authentication method, so they can complete MFA on any device. When you enable MFA in the dashboard, Auth0 will not prompt for MFA if users authenticated with WebAuthn w/Biometrics as first factor. WebAuthn with Device Biometrics combines two factors in one: something you have (the device), and something you are (biometrics) or something you know (the passcode).
WebAuthn with Device Biometrics allows avoiding requiring another authentication method for performing multi-factor authentication.
0 kommentar(er)
