Auth0 Trigger MFA based on organization.js

function requireMfa(user, context, callback) {

  // Context object Ref: https://auth0.com/docs/customize/rules/context-object
  // It only makes sense to prompt for MFA when the user has at least one 
  // enrolled MFA factor.
  const enforceMfaForOrgs = ['id_org1', 'id_org2'];
  const shouldPromptMfa = context.organization && context.organization.id && enforceMfaForOrgs.indexOf(context.organization.id) >= 0;
  const userEnrolledFactors = user.multifactor || [];
  const canPromptMfa = userEnrolledFactors.length > 0;
  
  // This will only prompt user once per session
  // You can add more conditions such do Mfa every 60 minutes
  // Checkout context.authentication.timestamp 
  // Ref: https://auth0.com/docs/customize/rules/context-object
  const completedMfa = !!context.authentication.methods.find(
    (method) => method.name === 'mfa'
  );
  
  if (!completedMfa && shouldPromptMfa && canPromptMfa) {
    context.multifactor = {
      provider: 'any',
      // ensure that we will prompt MFA, even if the end-user has selected to 
      // remember the browser.
      allowRememberBrowser: false
    };
  }
  callback(null, user, context);
}