CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION challenge is not triggered.

[akhilrangu]

Before creating a new issue, please confirm:

• I have searched for duplicate or closed issues and discussions.
• I have tried disabling all browser extensions or using a different browser
• I have tried deleting the node_modules folder and reinstalling my dependencies
• I have read the guide for submitting bug reports.

On which framework/platform are you having an issue?

React

Which UI component?

Authenticator

How is your app built?

Vite

What browsers are you seeing the problem on?

Chrome

Which region are you seeing the problem in?

No response

Please describe your bug.

I have a userPool with Required MFA, and the MFA methods are TOTP and SMS.
When the user tries to signIn, amplify should return the challenge CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION, but the amplify's response is
CONTINUE_SIGN_IN_WITH_TOTP_SETUP

Please let us know, when CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION challenge is triggered (if there are any further configs required).

What's the expected behaviour?

I have a userPool with Required MFA, and the MFA methods are TOTP and SMS.
When the user tries to signIn, amplify should return the challenge CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION.

Help us reproduce the bug!

Create a user Pool with Required MFA and add TOTP and SMS as MFA methods.
signIn with username and password through aws-amplify.

Code Snippet

// Put your code below this line.

Console log output

No response

Additional information and screenshots

No response

[osama-rizk]

Hi @akhilrangu ,

Thank you for creating this issue. Can you please share with us your package.json file?

[akhilrangu]

Hi @osama-rizk
I hope you need, aws-amplify version, if yes, I'm using the latest version "aws-amplify": "^6.16.3". Please let me know, if you need further details.

[osama-rizk]

Thank you for providing these details. We will investigate and get back to you.

[osama-rizk]

Hey @akhilrangu,

I have a userPool with Required MFA, and the MFA methods are TOTP and SMS.

Can you share your amplify/auth/resource.ts file? Do you have it configured like the following:

import { defineAuth } from '@aws-amplify/backend';

export const auth = defineAuth({
  loginWith: {
    email: true, // or whatever login method you're using
  },
  multifactor: {
    mode: 'REQUIRED',
    totp: true,
    sms: true,
  },
});

[akhilrangu]

I don't have this configured, in our app, if I'm not wrong, this is for passwordless right. Please correct, if I'm wrong?
I'm looking for password based authentication, and expectng the aws-amplify to return CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION, when the user signs in with username and password. And it is working as expected when tested with Hosted UI in AWS. Expecting the similar response.

Also, we use aws-amplify with react, and we are not using aws-amplify/backend for our configuration.

[osama-rizk]

Hey @akhilrangu ,

this is for passwordless

It is for any auth configuration e.g MFA, password, passwordless, OIDC ....etc.

we use aws-amplify with react, and we are not using aws-amplify/backend for our configuration.

The recommended way to configure auth (e.g MFA, password, passwordless, OIDC ....etc) is inside amplify/auth/resource.ts Amplify follows a code-first approach where code configuration takes precedence over console settings. To setup MFA please follow this guide.

Please let us know if you encounter any issues.