MFA can't be disabled

** Which Category is your question related to? ** Auth

** What AWS Services are you utilizing? ** Cognito

** Provide additional details e.g. code snippets **

Auth.signIn(username, password)
    .then(user => {
      if (user.challengeName === 'SELECT_MFA_TYPE') {
      // ...now what?

So, digging deeper into things on GitHub, I’ve tried user.sendMFASelectionAnswer('SOFTWARE_TOKEN_MFA', callback) which didn’t seem to work. The Auth class doesn’t seem to have anything.

I actually have all MFA disabled for this user, yet I’m getting this response that’s asking me to choose which MFA option to use. So I can’t log in.

Any user that previously did not set up BOTH SMS and TOTP seems to be ok though.

Any user that set up and has enabled MFA can login using MFA because the challengeName that comes back then is SOFTWARE_TOKEN_MFA or SMS_MFA and I call an Auth.confirmSignIn() with the code answer.

[X-Equals-Zero]

Year later and this still hasn’t been resolved…

[vic-blt]

Same problem, I think I will avoid using the CLI from now on as it automatically creates an SNS role which can’t be removed from the user pool, even if you delete this role.

EDIT:

• amplify add auth
• go through all the config
• open the file backend/auth/<name>/<name>-cloudformation-template.yml
• remove SNSRole row in Resources and SmsConfiguration in Resources > UserPool > Properties
• amplify push

You can see there’s no SNS role attached to your User Pool.