Magic codes

The flow#

With magic codes turned on for the environment, the hosted sign-in offers to email a six-digit code instead of asking for a password. The code expires after 10 minutes and is used once. The session is then issued exactly as for any other method, including MFA when required.

Limits#

• At most three codes a minute per address.
• Magic codes are available on the hosted pages only, not in the embedded form.