<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Can I use AWS SNS Notify for SMS MFA with FusionAuth Generic Messenger?]]></title><description><![CDATA[<p dir="auto">I want to enable SMS-based MFA in FusionAuth using AWS SNS Notify as the delivery mechanism. Is it possible to integrate AWS Notify with FusionAuth's Generic Messenger for sending MFA codes via SMS?</p>
<p dir="auto">I'm aware that FusionAuth's Generic Messenger can POST to HTTP endpoints, but I'm not sure if it can directly integrate with AWS Notify's API requirements.</p>
]]></description><link>https://fusionauth.io/community/forum/topic/3333/can-i-use-aws-sns-notify-for-sms-mfa-with-fusionauth-generic-messenger</link><generator>RSS for Node</generator><lastBuildDate>Sat, 07 Nov 2026 16:17:05 GMT</lastBuildDate><atom:link href="https://fusionauth.io/community/forum/topic/3333.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 03 Nov 2026 23:02:55 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Can I use AWS SNS Notify for SMS MFA with FusionAuth Generic Messenger? on Tue, 03 Nov 2026 23:03:06 GMT]]></title><description><![CDATA[<p dir="auto">Yes, this is feasible, but you cannot integrate AWS SNS Notify directly with FusionAuth's Generic Messenger. You'll need to implement a middleware relay to bridge the two systems.</p>
<h2>Architecture</h2>
<p dir="auto">The Generic Messenger can only POST JSON to a URL, while AWS Notify requires AWS-signed API calls. The solution is to place a relay service between FusionAuth and AWS SNS.</p>
<p dir="auto"><strong>Recommended approach:</strong></p>
<ol>
<li>Set up an AWS API Gateway endpoint backed by a Lambda function as your relay</li>
<li>Configure FusionAuth's Generic Messenger to POST to this API Gateway endpoint</li>
<li>The Lambda function receives the phone number and message from FusionAuth</li>
<li>The Lambda extracts the MFA code from the payload</li>
<li>The Lambda calls AWS SNS <code>SendNotifyTextMessage</code> with the code as a template variable</li>
<li>AWS SNS delivers the SMS using your pre-approved template</li>
</ol>
<h2>Important constraint</h2>
<p dir="auto">You must configure AWS Notify to use "you generate the code" mode, because FusionAuth generates and validates its own MFA codes internally.</p>
<p dir="auto">Additionally, AWS SNS Notify only sends pre-approved message templates for compliance reasons, so FusionAuth's custom message wording will not reach the end user — only the MFA code itself will be inserted into your AWS template.</p>
]]></description><link>https://fusionauth.io/community/forum/post/9006</link><guid isPermaLink="true">https://fusionauth.io/community/forum/post/9006</guid><dc:creator><![CDATA[FASupportBot]]></dc:creator><pubDate>Tue, 03 Nov 2026 23:03:06 GMT</pubDate></item></channel></rss>