Auth0 Docs

Auth0 documentation

Deploy & Monitor

• Deploy and Monitor: Learn about Auth0 public and private cloud deployment options, as well as deployment checklists and tools.

Deployment

• Deployment Options: Compare the Auth0 deployment options available from the multi-tenant public cloud to dedicated and private cloud tenants.
• Deployment Checklist: Read the Auth0 deployment checklist before promoting a tenant to production so security and branding settings are all confirmed.
• Auth0 CLI: Learn how to use Auth0 CLI to manage your tenant configuration, automate tasks, and integrate Auth0 into your development and deployment workflows.
• Auth0 Terraform Provider: Learn about the Auth0 Terraform Provider for representing your tenant configurations as code.
• Deployment Best Practices: Learn about the Auth0 deployment best practices when promoting a tenant configuration to production.

Private Cloud Deployments

• Private Cloud Deployments: Compare Auth0 Private Cloud-managed service deployment options on AWS and Azure to choose a dedicated, isolated environment that meets your data-residency, performance, and guaranteed RPS requirements beyond the multi-tenant Public Cloud.
• Private Cloud on AWS: Learn about the Auth0 identity platform on AWS deployment option and its capabilities.
• Private Cloud on Azure: Learn about the Auth0 identity platform on Azure deployment option and its capabilities.
• Private Cloud Add-on Features: Learn about add-on features that can complement your Auth0 Private Cloud deployment.

Pre-Deployment Checks

• Pre-Deployment Checks: A reference of helpful pre-deployment checks for your production Auth0 environment.
• Run Production Readiness Checks: Learn how to run the Auth0 Production Checks to ensure that your Applications are production-ready.
• Production Readiness Checks: Critical Fixes: Fixes you must make to your Auth0 Application prior to production deployment
• Production Readiness Checks: Non-Critical Fixes: Recommendations on how you can improve your Auth0 Application prior to production deployment
• Production Readiness Checks: Best Practices: Checks to ensure that your Applications comply with Auth0 best practices
• Run Pre-Deployment Tests: Learn how to test your Auth0 implementation prior to deployment to production environments.
• Pre-Launch Tips: A list of helpful tips for when getting started with Auth0 services based on feedback and experience from others

Deploy CLI

• Auth0 Deploy CLI: Learn how to use the Auth0 Deploy CLI to manage your tenant configuration and resources and integrate it into your development workflows.
• Use as a CLI: Learn how to the use the Auth0 Deploy CLI as a standalone command-line utility.
• Use Deploy CLI as a Node Module: Learn how to use the Auth0 Deploy CLI as a node module to use it directly from your own deployment scripts.
• Configure the Deploy CLI: Learn how to configure the Auth0 Deploy CLI to modify the tool for your needs.
• Authenticate with your Tenant: Learn about the different methods of authenticating the Auth0 Deploy CLI with your tenant.
• Keyword Replacement: Learn how to manage a multi-tenant workflow with the Auth0 Deploy CLI using keyword replacement.
• Incorporate into Multi-environment Workflows: Learn how to support multi-tenant, multi-environment workflows when using the Auth0 Deploy CLI.
• Exclude Resources From Management: Learn how to exclude resources from being managed when using the Auth0 Deploy CLI.
• Resource-specific Documentation: Learn about the specifics of resource documentation for the Auth0 Deploy CLI.
• Available Resource Configuration Formats: Learn about the available configuration formats when using the Auth0 Deploy CLI.

Monitoring

• Metric Streams: Stream Auth0 metrics to monitoring platforms like Datadog, New Relic, and Splunk for real-time observability.

Monitor

• Monitor Auth0: Describes how to monitor and track your Auth0 usage, as well as how to send tenant logs to external tools.
• Check Auth0 Status: Learn how to check Auth0 public cloud service availability, incident reports, and historical uptime reports.
• Check External Services Status: Check the status of external services like Social and Enterprise identity providers to diagnose Auth0 login failures from upstream outages.
• Monitor Applications: Your applications depend on Auth0. Monitoring Auth0's health lets you report errors or reduce user impact in case there's an issue with Auth0. Learn more.
• Monitor Auth0 Using System Center Operations Manager: Describes how to monitor Auth0 as a standard web application using System Center Operations Manager (SCOM) or any tool that supports synthetic transactions.

Logs

• Logs: Auth0 tenant logs capture every authentication event and configuration change so you can audit usage and feed the data into your SIEM.
• Personally Identifiable Information in Auth0 Logs: Describes the potential personally identifiable information (PII) that Auth0 writes to tenant logs.
• Log Data Retention: Review how long Auth0 retains tenant log data based on your subscription plan so you know when to export logs for longer-term analysis.
• View Logs: Learn how to view logs in the Dashboard including user authentication and administrative actions such as adding and updating applications, connections, and rules.
• Filter Log Events: Filter Auth0 logs by event type to surface errors, warnings, and successful operations across your tenant for monitoring and incident response.
• Prompt Details in Tenant Logs: Describes attributes and values from user prompts in Auth0 tenant logs.
• Retrieve Logs Using the Management API: Learn how to retrieve logs using the Auth0 Management API get_logs endpoint by checkpoint or by search criteria.
• Log Type Codes: Lists the event codes associated with log events.
• Log Search Query Syntax: Describes search query syntax using a subset of the Lucene query syntax to refine Auth0 log searches.

AI Agents & MCP

Agent as Principal

• Agent as Principal: Register AI agents as first-class identities in Auth0 with their own lifecycle, credentials, and audit trail.

Get Started

• Register an Agent: Create and register agents using the Auth0 Dashboard or Management API
• Associate an Agent with a Client: Associate one or more clients with an agent so that tokens issued to those clients carry the agent's identity for attribution and traceability.
• Agent Identity in Tokens: How Auth0 embeds agent identity in access tokens across client credentials, OBO token exchange, and standard login flows.

Reference

• Agent Context in Actions: Access agent identity and metadata in Auth0 Actions using the event.agent object.
• Agent ID in Tenant Logs: Track agent activity through Auth0 tenant logs using agent_id or external_agent_id.

AI Identity for B2B

• AI Identity for B2B: Secure your AI agents with user authentication, delegated authorization, human-in-the-loop controls with CIBA, and fine-grained authorization in RAG pipelines.

Get Started

Concepts

• Concepts: Learn the core concepts behind securing AI agents with Auth0, including user authentication, delegated authorization, asynchronous authorization, and authorization for RAG.
• User Authentication for AI Agents: Integrate Auth0 into your AI agents to secure user authentication with social, enterprise, and custom identity providers.
• Asynchronous Authorization: Enable AI agents to request user consent for sensitive actions via push notification, SMS, or email using CIBA, without interrupting the user's current session.
• Authorization for RAG: Enforce fine-grained, document-level access control in RAG pipelines with Auth0 FGA, ensuring AI agents only retrieve data the current user is authorized to see.

Delegated Authorization

• Delegated Authorization for AI Agents: Enable your AI agents to call APIs on a user's behalf using OAuth 2.0, with access scoped to only what the user has explicitly consented to.
• Call First-Party APIs on User's Behalf: Enable your AI agents to securely call first-party APIs on behalf of authenticated users.
• Call Third-Party APIs on User's Behalf: Enable your AI agent to call third-party APIs on the user's behalf with Token Vault.

Quickstarts

• Quickstarts: Start building with AI Identity for B2B quickstarts.
• User Authentication: Leverage Auth0's Universal Login to enable AI agents to securely authenticate users.
• Call First-Party APIs on Users' Behalf: Manage tokens to enable AI agents to call first-party APIs on the user's behalf.
• Call Third-Party APIs on Users' Behalf: Connect AI agents to external tools, functions, and services using Token Vault.
• Asynchronous Authorization: Add human-in-the-loop controls for critical or delayed actions using secure protocols like Client-Initiated Backchannel Authentication.
• Authorization for RAG: Use Auth0 Fine-Grained Authorization to enforce document and relationship-level access control in your Retrieval Augmented Generation (RAG) pipelines.

Connections

• Connections: Use Auth0 connections to enable AI Agents to access and call third-party APIs on the user's behalf through Token Vault.

Social Connections

• Amazon: Connect your AI agents to Amazon to manage inventory, update product listings, and track sales performance.
• Basecamp: Connect your AI agent to a user's Basecamp account to create projects, add to-do items, post messages, and upload files.
• Bitbucket: Connect your AI agent to Bitbucket to manage repositories and automate pull request creation and management.
• Box: Connect your AI Agents to Box for file management and collaboration.
• DigitalOcean: Connect your AI agent to a user's DigitalOcean account to automate the creation and management of servers and storage volumes.
• Discord: Connect your AI agent to a Discord server to welcome new members, play music, manage user roles, and integrate with other services.
• Dropbox: Connect your AI agent to a user's Dropbox account to automatically organize files into folders and manage shared links.
• Figma: Connect your AI agent to a user's Figma account to export assets and apply changes to design files programmatically.
• Fitbit: Connect your AI agent to a user's Fitbit account to track fitness data and set new fitness goals.
• Freshbooks: Connect your AI agent to a user's FreshBooks account to create invoices, track expenses, and manage client information.
• GitHub: Connect your AI Agents to GitHub for repository access, issue management, and developer workflows.
• Google: Connect your AI Agents to Google services including Gmail, Google Calendar, Drive, and more.
• Hugging Face: Connect your AI agent to a user's Hugging Face account to manage and upload models and datasets.
• Microsoft: Connect your AI Agents to Microsoft services including Outlook, Teams, OneDrive, and more.
• OAuth2: Build a custom social connection for any OAuth2 compliant authorization server.
• PayPal: Connect your AI agent to a user's PayPal account to automate invoice sending and process payments.
• Salesforce: Connect your AI agent to a user's Salesforce account to create or update leads, manage contacts, and automate case management.
• Slack: Connect your AI Agents to Slack for team communication and workflow automation.
• Snapchat: Connect your AI agent to a user's Snapchat account to share content like photos, videos, and links.
• Spotify: Connect your AI agent to a user's Spotify account to create and modify playlists.
• Stripe Connect: Connect your AI agent to Stripe to manage account setup, review payments, and create reports.
• Tumblr: Connect your AI agent to a user's Tumblr blog to create and schedule new posts and reblog content.
• Twitch: Connect your AI agent to a user's Twitch channel to create stream markers and manage channel polls.
• X (Twitter): Connect your AI agent to a user's Twitter account to monitor keywords, automatically reply to tweets, and schedule content.

Enterprise Connections

• OpenID Connect (OIDC): Configure a custom OIDC connection to integrate with any OpenID Connect compliant identity provider.
• Google Workspace: Connect your AI agents to Google Workspace services including Gmail, Calendar, Sheets, Drive, and more.
• Microsoft Entra (Azure AD): Connect your AI agents to Microsoft Entra services including Outlook, Teams, OneDrive, and more.

SDKs

• AI Identity for B2B SDKs: Start building secure AI agents with the Auth0 AI SDKs.
• JavaScript SDKs & Samples: Auth0 JavaScript SDKs make it easy for developers to integrate with and secure AI agent workflows.
• Python SDKs & Samples: Auth0 Python SDKs make it easy for developers to integrate with and secure AI agent workflows.
• LangChain SDKs & Samples: AI Identity for B2B LangChain & LangGraph SDKs make it easy for developers to integrate with and secure AI agent workflows using LangChain and LangGraph.
• LlamaIndex SDK: AI Identity for B2B LlamaIndex SDKs make it easy for developers to integrate with and secure AI agent workflows using LlamaIndex.
• Vercel AI SDKs & Samples: AI Identity for B2B Vercel AI SDKs make it easy for developers to integrate with and secure AI agent workflows using Vercel AI.
• Cloudflare Agents SDKs & Samples: AI Identity for B2B Cloudflare SDK makes it easy for developers to integrate with and secure AI agent workflows using Cloudflare Agents.
• Genkit SDK: AI Identity for B2B Genkit SDK makes it easy for developers to integrate with and secure AI agent workflows using Genkit.

Resources

Sample Apps

• Sample Apps: Explore sample apps built using AI Identity for B2B.
• Deploy to Amazon Bedrock with Auth0: Learn how to secure Amazon Bedrock and AgentCore agents with AI Identity for B2B.

How-tos

• How-Tos: Explore How-Tos of common AI Identity for B2B use cases.
• Check Google Calendar Availability: Use OpenAI, NextJS, and the Auth0-AI SDKs to check your Google Calendar availability.
• List GitHub Repositories: Use OpenAI, NextJS, and the Auth0-AI SDKs to list your GitHub repositories
• List Slack Channels: Use OpenAI, NextJS, and the Auth0-AI SDKs to list your Slack channels
• Get Salesforce Opportunities: Use OpenAI, NextJS, and the Auth0-AI SDKs to get Salesforce opportunities

Cross App Access (XAA)

• Cross App Access (XAA): Create and manage AI agent-to-app and app-to-app connections using centralized enterprise admin controls, with out-of-the-box support for MCP's Enterprise-Managed Authorization.

Set up Auth0 as Resource App

• Set up Auth0 as Resource App: Configure your Auth0 tenant as the Resource App Authorization Server to accept ID-JAG requests and issue access tokens for your API.
• XAA Environment Setup: Configure your Auth0 tenant as the Resource App Authorization Server to accept ID-JAG requests and issue access tokens for your API.
• (Optional) Add Organization Support: Add Organization support to a Cross App Access (XAA) IdP to associate access tokens with org_id.
• End-to-end Testing: Learn how to test the end-to-end XAA flow.

IdP Integration

• Okta as OIDC IdP: Learn how to configure Okta as an OIDC identity provider for Cross App Access (XAA).
• Okta as SAML IdP: Learn how to configure Okta as a SAML identity provider for Cross App Access (XAA).

Set up Auth0 as Requesting App

• Set up Auth0 as Requesting App: Configure your Auth0 tenant as the Requesting App to call third-party APIs on a user's behalf using the Cross App Access flow with tokens stored in Token Vault.
• XAA Environment Setup: Configure a test Resource App and the OIDC connection between your Requesting App tenant and the Resource App tenant for Cross App Access.

IdP Integration

• Okta as OIDC IdP: Configure Okta as the OIDC enterprise identity provider for the XAA Requesting App.

Auth for MCP

• Auth for MCP: Enable MCP clients to securely connect to MCP servers with Auth0.

Get Started

• Why use Auth for MCP: Benefits of using Auth0 to authenticate users before they or their AI Agents connect to MCP Servers.

Quickstarts

• Get Started: Start building with Auth for MCP quickstarts.
• Authorization for Your MCP Server: Learn how to protect your MCP server by requiring access tokens from authorized clients.
• Call First-Party APIs on a User's Behalf: Learn how to call an Auth0-protected API from your MCP server.
• Control Access to MCP Tools with FGA: Learn how to implement fine-grained authorization for your MCP server tools using Auth0 FGA with roles, groups, and temporal access.

Guides

• Enable Resource Parameter Compatibility Profile: Learn how to enable the resource parameter in Auth0.
• Test your MCP Server with MCP Inspector: Learn how to test your MCP server with MCP Inspector.

Register your MCP Client Application

• Register your MCP Client Application: Learn how to register your MCP client application in Auth0.
• Dynamic Client Registration (DCR): Learn how to dynamically register clients in Auth0.

Sample Apps

• Sample Apps: Explore sample MCP apps built using Auth for MCP.
• Secure MCP Servers with Auth0 and Cloudflare: Learn how to use Auth0 and Cloudflare to secure MCP servers.

Platform

• Auth0 Platform: Auth0 policies, plans, and support.
• Auth0 Changelog
• Auth0 Community
• Auth0 Blog

Customer Support

• Customer Support: Describes the different types of support options provided by Auth0.
• Support Plans: The different levels of Auth0 support
• Product Support Matrix: Describes Auth0 features, platforms, and software configurations.
• Service Level Agreements: A summary of key elements of Auth0's Service Level Agreement (SLA) for both Enterprise Public Cloud and Enterprise Private Cloud deployments.
• Open and Manage Support Tickets: Describes how to open and manage tickets with Support Center.
• Responsible Disclosure Program: All customers, even those with free subscription plans, can report security concerns in Auth0 Responsible Disclosure Program.

Account and Plan Management

• Update Billing Information: Update billing information from Auth0 Dashboard
• Manage your Auth0 Subscription Plan: Learn how to upgrade, downgrade, or cancel your Auth0 subscription plan.
• Delete or Reset Tenants: Learn how to delete your tenant or reset it to the default configuration.
• Export Data: Describes how to export data from Auth0.
• Monitor Subscription Usage: Learn how to monitor your Auth0 subscription usage.
• Reset Account Passwords: Describes how to reset Auth0 account passwords.

Operational Policies

• Auth0 Operational Policies: Describes Auth0's established operational policies including billing, data export and transfer, load and penetration testing, rate limits, tenant restoration, and Dashboard authentication.
• Billing Policy: Describes the billing policy which governs requests for billing mechanisms within the Auth0 Dashboard
• Auth0 Public Cloud Service Endpoints: Lists all the endpoints used by Auth0 public cloud service.
• Data Export and Transfer Policy: Describes Auth0 policies on exporting and transferring data.
• Change Freeze Policy: Learn about Auth0's change freeze policy, including currently scheduled periods and testing restrictions.
• Load Testing Policy: Describes Auth0's Load Testing Policy.
• Penetration Testing Policy: Describes Auth0's Penetration Testing Policy.
• Entity Limit Policy: Describes Auth0's tenant entity limit policy for subscribers.
• Auth0 Versioning Strategy: Understand how Auth0 versioning works.

Rate Limit Policy

• Rate Limit Policy: Describes Auth0's rate limit policy.
• Rate Limit Use Cases: How to determine if you are being rate limited
• Custom Rate Limit Policies: Set per-application rate limit ceilings to protect your tenant from misconfigured or misbehaving applications.

Rate Limit Configurations

• Rate Limit Configurations: Learn about Auth0 rate limiting policies that help prevent service interruption and degradation.
• Free: Rate limit policies for the Free Public subscription type.
• Essentials and Professional: Rate limits for the Essentials and Professional pricing plans.
• Enterprise Rate Limits: Rate limits for the Enterprise subscription type.
• Tier Dev Private Cloud: Rate limits for the Tier 20 (Development) Private Cloud subscription type.
• Private Cloud Basic 100 RPS (1x): Tier 100 RPS Private Cloud rate limits
• Private Cloud Performance 500 RPS (5x): Tier 500 RPS Private Cloud rate limits
• Private Cloud Performance 1500 RPS (15x): Tier 1500 RPS Private Cloud rate limits
• Private Cloud Performance 3000 RPS (30x) and 3000 RPS (30x) Burst: Tier 3000 RPS Private Cloud rate limits
• Private Cloud Performance 6000 RPS (60x) and 6000 RPS (60x) Burst: Tier 6000 RPS Private Cloud rate limits
• Private Cloud Performance 10,000 RPS (100x): Tier 10000 RPS Private Cloud rate limits

Data Privacy and Compliance

• Auth0 Data Privacy and Compliance
• Auth0 Data Processing: Learn how Auth0 handles tenant data in its possession, including storage regions, retention, encryption, and access controls.

GDPR

• Auth0 General Data Protection Regulation Compliance: Describes how Auth0 complies with the EU's General Data Protection Regulation (GDPR).
• GDPR: Conditions for Consent: Describes which Auth0 features can help you comply with the Conditions for Consent GDPR requirements.
• GDPR: Track Consent with Custom UI: Describes how you can use either auth0.js or the Auth0 APIs to capture consent information when you use your own custom UI for logins.
• GDPR: Track Consent with Lock: Customize Auth0 Lock to capture GDPR consent at signup by adding a consent checkbox, recording the choice in user metadata, and persisting it across logins.
• GDPR: Right to Access, Correct, and Erase Data: Describes Auth0 features that help you comply with the GDPR requirements on the user's right to access, correct, and erase their personal data.
• GDPR: Data Minimization: Describes how you can minimize the personal data they collect for processing and ensure their security.
• GDPR: Data Portability: Describes how you can export user data in order to comply with data portability GDPR requirements.
• GDPR: Protect and Secure User Data: Describes how you can use Auth0 features to protect and secure user's personal data.

Product Lifecycle

• Product Lifecycle: Learn about the Auth0 product lifecycle, including product release stages, deprecations, end-of-life, the migration process, and active migrations.
• Product Release Stages: Describes how we stage, release, and retire product functionality.
• Migration Process: Describes the migration process at Auth0, including End of Life announcements, migration windows, and migration guides.

Deprecations and Migrations

• Deprecations and Migrations: Lists all deprecations with active migrations that may impact your tenant.
• Migrate to Enhanced Security for Third-Party Applications: Learn how enhanced security controls affect existing and newly created third-party applications.
• Migrate from Node 18 to Node 22: Describes Auth0 Actions items affected by the Node.js 18
• Migrate Enabled Client Management to Dedicated Connection Endpoints: Learn how to update your Auth0 connection configuration from using the enabled_clients field to dedicated connection endpoints.
• Migrate to Management API Connection Options Scopes: Learn how to update your Auth0 integrations to manage connections with options-specific scopes.
• Migrate Oversized User Profiles: Learn how to identify, review, and migrate away from oversized Auth0 user profiles ahead of the 10KB size limit enforcement.

Past Migrations

• Past Migrations: List of Auth0 updates that have already been enabled for all customers.
• Migrate to Non-Verifiable Callback URI End-User Confirmation: Learn how you can enhance security and mitigate risks of application impersonation with HTTPS-based callbacks.
• Migrate from Node 12 and 16 to Node 18: Describes Auth0 Actions items affected by the Node.js v12+6 to Node.js v18 migration.
• Migrate from edge.js extensibility features: Get started using Auth0. Implement authentication for any kind of application in minutes.
• Migrate from oracledb extensibility features: Get started using Auth0. Implement authentication for any kind of application in minutes.
• Migrate Custom Claims: Describes migration from Legacy namespaced claims to custom claims.
• Migrate from Log Extensions: Migrate from log extensions to log streams or Auth0 Marketplace integrations.
• Migrate Tenant Hostname Validation: Describes how to check tenant logs for deprecation notices so you can migrate your application domain
• Migrate to Node.js 16: Describes Auth0 features affected by the Node.js v12 to Node.js v16 migration and provides recommendations for migration.
• Migrate from Node.js 8 to Node.js 12: Describes Auth0 features affected by the Node.js v8 to Node.js v12 migration and provides recommendations for migration.
• Migrate to Management API v2 Endpoint Paginated Queries: Describes how to use the pagination parameters for specific Management API v2 endpoint queries.
• Migrate to New Tenant Member Roles: Learn how to migrate to the new Dashboard tenant member roles feature.
• Migrate from Search v2 to v3: Learn how to migrate from Auth0 Search v2 to v3.
• Migrate to Passwordless Endpoint from Confidential Applications: Describes the migration steps you need to take because Auth0 is deprecating the usage of the /passwordless/start endpoint from confidential applications without a client secret in the request.
• Clickjacking Protection for Universal Login Change: Describes how Auth0 is adding a way to prevent the Universal Login pages from being embedded into an iframe to protect against clickjacking attacks.
• Migrate to Management API Endpoints with Access Tokens: Describes the deprecation of using ID tokens as credentials for the Management API and how to migrate your configuration to use access tokens.
• Migrate to Access Tokens for Account Linking: Describes how to migrate from using ID tokens to access tokens when linking user accounts.
• Migrate Your Resource Owner Passwordless Credentials Exchange: Describes how to migrate your Passwordless API calls and responses from /oauth/ro to /oauth/token.
• Migrate Your Resource Owner Password Flow: Describes how to migrate your password API calls and responses from /oauth/ro to /oauth/token.
• Instagram Connection Deprecation: Describes changes occuring due to Instagram deprecating their Authentication API.
• Yahoo API Changes: Describes the Yahoo API changes that affect the structure of the user profile.
• Migrate from Google to Firebase Cloud Messaging: Describes how to migrate your applications based on the Guardian Android SDK to Firebase Cloud Messaging
• Facebook Social Context Field Deprecation: Describes changes occuring due to Facebook removing access to the social context field from their profile.
• Facebook Graph API Changes: The latest version of the Facebook Graph API changes what permissions and fields can be requested.
• Migrate from Legacy Authentication Flows: Describes how to migrate from legacy authentication flows.
• Migrate to Tenant Log Search v3: Describes how to migrate from Auth0 Logs Search v2 to v3.
• Migrate to 1-Hour Login Flows Expiration: Describes how to enable 1-hour expiration for interactive login flows.

OpenAPI Specs

• myaccount-api-oas
• myorganization-api-oas
• management-api-oas
• events-schema
• logs-schema
• authentication-api-oas
• authentication-api-oas
• authentication-api-oas