Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide a way to go through MFA natively rather than in universal login #918

Open
5 tasks done
citrocitrusyolo opened this issue Jun 6, 2024 · 1 comment
Open
5 tasks done
Labels
feature request A feature has been asked for or suggested by the community

Comments

@citrocitrusyolo
Copy link

citrocitrusyolo commented Jun 6, 2024

Checklist

  • I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

When using universal login (authorize) if mfa is enabled it forces the user to go through the mfa 'loop' inside the browser. A product request has been to locate the mfa loop inside of the native app and keep the initial signin step in the browser

Describe the ideal solution

When mfa is required the option to return that to the native app as token endpoint does is ideal, ie

"json": {
    "error": "mfa_required",
    "error_description": "Multifactor authentication required",
    "mfa_token": '...'
},

Then we can use that to go through enrolment and/or challenge steps inside our native app, as opposed to having to complete it in browser.

Alternatives and current workarounds

Currently we are using mfa inside the browser. We investigated:

  • step-up auth for api access, however it appears to also require authorize
  • second application to sign in to after initial sign in, however this seemed pretty janky
  • the possibility of refresh tokens elevating perms but also seems janky

reviewed https://community.auth0.com/t/how-to-implement-mfa-step-up-when-using-auth0-js-sdk-for-authentication/27722/2

Additional context

No response

@citrocitrusyolo citrocitrusyolo added the feature request A feature has been asked for or suggested by the community label Jun 6, 2024
@citrocitrusyolo
Copy link
Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request A feature has been asked for or suggested by the community
Projects
None yet
Development

No branches or pull requests

1 participant