Skip to content

Commit ccece77

Browse files
authored
chore: update email mfa section (#8470)
1 parent 462ca64 commit ccece77

File tree

1 file changed

+2
-5
lines changed
  • src/pages/[platform]/build-a-backend/auth/concepts/multi-factor-authentication

1 file changed

+2
-5
lines changed

src/pages/[platform]/build-a-backend/auth/concepts/multi-factor-authentication/index.mdx

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -881,6 +881,8 @@ export const auth = defineAuth({
881881
mode: 'OPTIONAL',
882882
email: true,
883883
},
884+
// BE SURE TO PICK A RECOVERY OPTION APPROPRIATE FOR YOUR APPLICATION.
885+
accountRecovery: "EMAIL_AND_PHONE_WITHOUT_MFA",
884886
senders: {
885887
email: {
886888
fromEmail: '[email protected]',
@@ -920,15 +922,10 @@ Once you have setup email as your second layer of authentication with MFA as sho
920922

921923
In order to send email authentication codes, the following prerequisites must be met:
922924
- Cognito must be configured to send emails using [Amazon Simple Email Service (Amazon SES)](/[platform]/build-a-backend/auth/moving-to-production/#email).
923-
- [Advanced Security Features (ASF)](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be enabled in your user pool.
924925
- If account recovery is enabled in Cognito, the delivery method for recovery messages cannot be set to `Email only`
925926
</Callout>
926927

927928

928-
<Callout info>
929-
Additional pricing applies for ASF. [Learn more about Amazon Cognito pricing](https://aws.amazon.com/cognito/pricing/)
930-
</Callout>
931-
932929
### Enable EMAIL MFA during sign-up
933930

934931
You will need to pass `email` as a user attribute to enable email MFA for your users during sign-up. However, if the primary sign-in mechanism for your Cognito resource is already `email` (without enabling `username`), then you do not need to pass it as an attribute.

0 commit comments

Comments
 (0)