> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ulm.m1amdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authenticate with Email Address or Mobile Number and MFA

Digital Identity Management provides user authentication with an email number or mobile number and MFA challenge. A user navigates to the organization's login page and signs in with their authN ID, password, and completes a MFA challenge. After a successful MFA challenge, the user is logged in and can access the services they signed up for.

## User Authentication with MFA Flow

**Preconditions**

* The User ID exists in Digital Identity Management.
* The user has previously created a password.
* The user has registered the required number of factors for MFA.

Following is a typical user authentication example for this flow:

* A user visits the organization's login page.

* The user logs in with their email/mobile and password.

  **Note:** If the password has expired, as defined by the `passwordLifeTimeSeconds` setting, the user is prompted to update their password.

* Digital Identity Management authenticates the user identity and issues a MFA challenge.

* The user selects their preferred MFA option.

  **Note:** If the `minMfaCount` app setting is enabled (value is greater than 0), and the user doesn't have any factors registered for MFA, the process guides the user through the steps to register the required number of factors.

* Digital Identity Management issues an OTP/TOTP verification code to the user's selected MFA option.

* The user enters their OTP/TOTP verification code.

* The user is logged in after Digital Identity Management's successful identity verification.

## Authenticate User with MFA Challenge

<img src="https://mintcdn.com/amdocs-ulm/XSI-_zBHRIt1HJAz/portal/m1Connect/processGuide/images/authOnboardV2UserExistsPWMFA.png?fit=max&auto=format&n=XSI-_zBHRIt1HJAz&q=85&s=c263eee679d98e1458193af2b4948f54" alt="Email or mobile user authentication with a password using the MFA flow" width="1598" height="2017" data-path="portal/m1Connect/processGuide/images/authOnboardV2UserExistsPWMFA.png" />

## Application Settings

Some of the relevant app settings for this use case are:

* `minMfaCount`
* `verificationRequired`
* `2FAMaxRetryVerification`
* `promptMFAOnSetPassword`

See additional details about more [app settings](onboardAuthenticateUserV2#section_t4k_m2t_cpb) in the MarketONE Admin console and [parameters](onboardAuthenticateUserV2StepInterfaces) to help you configure your Digital Identity Management instance.

**Parent topic:**[Onboard and Authenticate Process](../topics/onboardAuthenticateUserV2)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.