azureazure-ad-b2cazure-ad-b2c-custom-policymulti-factor-authenticationtotp

Azure B2C Custom Policy: How do you reset the TOTP settings in the event that a user lost access to there authenticator app?

In my custom policy I used the example here: https://github.com/azure-ad-b2c/samples/tree/master/policies/totp

I have TOTP working, but I want to make sure I will be able to reset it if a user doesn't have access to their authenticator app anymore.

NOTE: This is NOT using Azure B2C's built-in flows where you can enable TOTP in the settings.

Solution

  • This seems like an Admin controlled operation. In which case

    1. List the softwareOathMethods for the user, here.
    2. Delete the softwareOathMethod for the user, here.

    The B2C policy will then ask the user to re-enrol an authenticator device on next sign-in.