can we have TFA options in drop down with email & phone otp together?

[grohitg238]

Hello experts,

can we have TFA options in drop down with email & phone otp together?

also if I remove default rule set, TFA is not triggering & I'm not able to combine both email & phone auth levels in single rule.

hence CDC is not rendering both options in dropdown which is available at tfa registration screen.

your guidance is appreciated.

Thanks,

Rohit

[kobico · Accepted solution]

Hi Rohit,

The risk level scores (10,20,30) are segment of authentication trust levels, and email is a type of "what you know" level which considered to be lower than "what you have" authentication type.

Also, since email TFA is usually registered during the registration process itself (email & password -> email verification), if you chose low risk level (10) then users will be already registered to email TFA and asked only for verification and not to re-register his email.

Unless users registered with username and they don't have a verified email in their account, which in this case they will be able to chose using either email or phone verification methods.