docs: remove stale Early Access note from MFA Flexible Factors doc

[sanchitmehtagit]

Summary

Removes a stale "Early Access — contact your Auth0 representative" banner from the MFA Flexible Factors Grant example doc. The MFA client API it warns about (MfaApiClient, MfaEnrollmentType, MfaVerificationType, MfaRequiredErrorPayload, MfaRequirements, etc.) is GA and has been for a while:

• Old MFA APIs deprecated in refactor : Deprecate the existing MFA APIs in AuthenticationAPIClient #932, removed in breaking: removed the deprecated MFA APIs #947 (breaking) — the current MfaApiClient surface is the replacement, not a preview of it.
• Actively maintained since: DPoP support added for MFA APIs (feat: Added DPoP support for MFA APIs #992), getAuthenticators filtering fix (fix: MFAClient getAuthenticators filtering based on Authenticator.type field #998), MfaRequiredErrorPayload optionality fix (#1272).
• Confirmed against the published com.auth0.android:auth0:4.0.1 Maven artifact — every class/method this doc references (MfaApiClient.getAuthenticators/enroll/challenge/verify, MfaEnrollmentType.Otp, MfaVerificationType.Oob/.Otp, MfaException.MfaChallengeException/MfaVerifyException, TotpEnrollmentChallenge.barcodeUri) is compiled into the jar with matching signatures.

The banner appears to be leftover copy from before the feature graduated to GA, and it survived the most recent edit to this file (docs: correct MFA getAuthenticators snippet for enroll flow, 2026-08-28).

Why this matters beyond docs accuracy

This file is the canonical MFA reference an AI coding-agent skill (auth0/agent-skills) points at for Auth0.Android MFA integration tasks. Running two different LLMs (gpt-5.6-terra via Codex, claude-sonnet-5 via Claude Code) against an eval that uses this exact doc showed the stale banner actively causing problems downstream:

• Both models, on reading "Early Access, contact your representative," independently distrusted the doc and spent significant extra tool calls re-verifying the API against the real SDK before writing code (one decompiled the published .aar and ran javap; the other made ~20 separate curl calls fetching individual .kt source files from GitHub, plus the CHANGELOG and a GitHub code-search query, to confirm each class/method actually shipped).
• An LLM-as-judge grader evaluating the resulting code took the banner's implication at face value and flagged the (correct, real, decompiled-and-confirmed) API surface as "fabricated" / "predates the MFA client API" — a false failure, since every symbol is genuinely present in the 4.0.1 release.

Removing the stale banner removes the ambiguity that triggers this distrust-and-reverify behavior, for both AI agents and human readers who might otherwise assume the feature is gated when it isn't.

Test plan

• Docs-only change; no code/build impact.
• Confirmed via javap against com.auth0.android:auth0:4.0.1 that all referenced classes/methods exist with matching signatures.

Summary by CodeRabbit

• Documentation
  • Updated MFA Flexible Factors Grant documentation by removing the Early Access notice and related contact instructions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 04bc515f-68b8-4391-8ce2-e0cf2fe90670

📥 Commits

Reviewing files that changed from the base of the PR and between ac4145c and 9f5f75d.

📒 Files selected for processing (1)

• examples/authentication-api/mfa-flexible-factors.md

💤 Files with no reviewable changes (1)

• examples/authentication-api/mfa-flexible-factors.md

Included review availability: Your plan provides up to 2 included reviews per hour; 1 remains after this review.

---

📝 Walkthrough

Walkthrough

The MFA Flexible Factors documentation removes the Early Access callout for SDK support and the instruction to contact an Auth0 representative.

Changes

MFA documentation

Layer / File(s)	Summary
Remove SDK Early Access notice examples/authentication-api/mfa-flexible-factors.md	Removes the callout that marked SDK MFA support as Early Access and directed readers to contact an Auth0 representative.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: amitsingh05667

Merge Risk: ⚪ Minimal · up to 854b5

The update removes an obsolete availability notice without changing runtime behavior or build outputs.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: removing the stale Early Access note from the MFA Flexible Factors documentation.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/mfa-flexible-factors-remove-stale-early-access-note

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pmathew92]

Are Flexible Factors Grant available in GA @gyaneshgouraw ?

[pmathew92]

Holding this PR till MFA goes GA

[gyaneshgouraw]

Are Flexible Factors Grant available in GA @gyaneshgouraw ?

They are not yet GA, we are following up on this to get exact time frame when the feature goes GA.