Repository navigation
Add an email code as an MFA factor - #64
Open
pacific-ring wants to merge 2 commits into
Open
pacific-ring wants to merge 2 commits into
pacific-ring wants to merge 2 commits into
Conversation
The second-factor list now offers an email address the server names, next to push and a phone code. The code screen is shared with the phone code, so a wrong code, Back, "Verify another way" and Resend behave the same. Factors are listed as iOS lists them: push, text, voice call, then email. Co-Authored-By: Claude <noreply@anthropic.com>
…ck while verifying Co-Authored-By: Claude <noreply@anthropic.com>
pmathew92
reviewed
Nov 13, 2026
| ### Multi-Factor Authentication | ||
|
|
||
| When the tenant's MFA policy asks for more than the emailed code, `EmbeddedLoginScreen` moves into MFA in place; nothing extra is needed in your app. Today it runs a push notification or a code sent to a phone, by text message or voice call. With several factors, the user picks one from a list first. Other factors aren't supported in this flow yet. | ||
| When the tenant's MFA policy asks for more than the emailed code, `EmbeddedLoginScreen` moves into MFA in place; nothing extra is needed in your app. Today it runs a push notification, or a code sent to a phone (by text message or voice call) or to an email address. With several factors, the user picks one from a list first. Other factors aren't supported in this flow yet. |
Member
There was a problem hiding this comment.
Nit: Pbly just adding a list of supported factors will be easier to update
pmathew92
approved these changes
Nov 13, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
The second-factor list now offers an email address the server names, next to push and a phone code. The code screen is shared with the phone code, so a wrong code, Back, "Verify another way" and Resend behave the same.
Type of Change
Testing
Checklist
I have read the Auth0 general contribution guidelines
I have read the Auth0 Code of Conduct
All existing and new tests complete without errors