auth0-mfa
Use when adding MFA or step-up authentication to an app — requiring users to verify with a second factor (TOTP, SMS, passkey, push) for login or before a sensitive action. Also use for adaptive/risk-based MFA or compliance requirements like HIPAA or PCI-DSS, even if the user just says \"add two-factor auth\" or \"require MFA before this action\".
Use when adding MFA or step-up authentication to an app — requiring users to verify with a second factor (TOTP, SMS, passkey, push) for login or before a sensitive action. Also use for adaptive/risk-based MFA or compliance requirements like HIPAA or PCI-DSS, even if the user just says \"add two-factor auth\" or \"require MFA before this action\".
Auth0 MFA Guide
Add Multi-Factor Authentication to protect user accounts and require additional verification for sensitive operations.
Overview
What is MFA?
Multi-Factor Authentication (MFA) requires users to provide two or more verification factors to access their accounts. Auth0 supports multiple MFA factors and enables step-up authentication for sensitive operations.
When to Use This Skill
-
Adding MFA to protect user accounts
-
Requiring additional verification for sensitive actions (payments, settings changes)
-
Implementing adaptive/risk-based authentication
-
Meeting compliance requirements (PCI-DSS, SOC2, HIPAA)
