With infobip and Auth0, you can connect to multiple countries with a single interface and enjoy all the benefits of an industry-leading platform that ensures compliance and value. Verified SMS helps increase customer trust in brand communication and raise awareness at the same time by including the brand name, logo, description, link preview, and verification of each message – enhancing the customer experience for all types of SMS communication.

Infobip

Global SMS messaging built for scale, speed, and deliverability

Dynatrace Log Management and Analytics, powered by [Grail](https://docs.dynatrace.com/docs/platform/grail/dynatrace-grail), provides a unified approach to unlocking the value of logs among all other observability data in the Dynatrace platform. 
 
Set hassle-free integration of identity and authentication logs. Dynatrace requires no schemas, indexing, or rehydration so that data is usable at any time for any analytics task. Leave default or configure custom retention period that fits your business and compliance needs. 
 
Dashboards, log metrics, and log events support automation and provide visual data representation for easy data access for analysis and faster problem resolution.

Dynatrace Log Streaming

Observe identity logs and analyze faster with AI in Dynatrace

iVALT replaces 2FA digits with “1-Click” Zero Trust Identity. Each user simply downloads the
iVALT mobile app and registers their mobile number and a valid email address. Once registered
and when using Auth0, the iVALT Action will notify the user to accept and present FaceID (iOS
or Android) on their mobile phone. If biometrics pass, the user is granted access.

While the 1-Click user experience is far superior, iVALT also captures, verifies and returns user
device ID, location, and time stamp. This information can be used by the Auth0 customer or
the user themselves to set geofences and time windows for their authentications to greatly
enhance security. This is a complete Zero Trust solution by verifying true human identity, while
going much further to protect against identity theft by requiring important contextual variables
to be true as well for access to important applications.

iVALT mobile app users also get iVALT’s DEEPFAKE protection for FREE. Suspicious callers can
be requested during the call to authenticate their identity through the iVALT app. 1-Click on
each end of the connection clarifies the true identity of the caller to the call recipient. iVALT is
marketing this protection for FREE as a “friends and family trust” approach to stopping fake
callers.

iVALT has partnered with leading companies in Post Quantum Encryption (PQE) as well to bring
new cutting-edge solutions to the identity market that are “futureproof”.

1-Click ZERO TRUST IDENTITY

iVALT uses mobile phone biometrics to verify login identity.

Amazon Simple Notification Service (SNS) is a highly available, durable, secure, fully managed pub/sub messaging service that enables you to decouple microservices, distributed systems, and serverless applications. Amazon SNS provides topics for high-throughput, push-based, many-to-many messaging. Using Amazon SNS topics, your publisher systems can fan out messages to a large number of subscriber endpoints for parallel processing, including Amazon SQS queues, AWS Lambda functions, and HTTP/S webhooks. Additionally, SNS can be used to fan out notifications to end users using mobile push, SMS, and email.

Amazon SNS

Fully managed pub/sub messaging for microservices and serverless applications by Amazon

Asignio is a browser-based handwriting biometric, using letters, numbers, and symbols drawn on a touch screen to uniquely authenticate the user. In just a few seconds, synchronous biometric analysis proves user presence, reduces fraud, and provides best-in-class security. Asignio's multiple web-based biometrics allow for easy authentication on any touch-device, while eliminating the need for passwords and one-time passcodes. 

Asignio, in partnership with Auth0, provides a fast, fun, easy-to-use, and secure solution to the challenge of user authentication. Existing Auth0 users can upgrade to biometric authentication easily with this integration. Use cases include phishing-resistant multi-factor authentication, fraud-deterrent identity verification (via driver's license or passport), step-up authentication, and account recovery. Contact us today to try a better way to sign in.

Asignio

Asignio is a browser-based handwriting biometric, using letters, numbers, and symbols drawn on a touch screen to uniquely authenticate the user. In just a few seconds, synchronous biometric analysis proves user presence, reduces fraud, and provides best-in-class security. Asignio's multiple web-based biometrics allow for easy authentication on any touch-device, while eliminating the need for passwords and one-time passcodes.

Asignio, in partnership with Auth0, provides a fast, fun, easy-to-use, and secure solution to the challenge of user authentication. Existing Auth0 users can upgrade to biometric authentication easily with this integration. Use cases include phishing-resistant multi-factor authentication, fraud-deterrent identity verification (via driver's license or passport), step-up authentication, and account recovery. Contact us today to try a better way to sign in.

Asignio Enterprise Connection

Unlock new revenue streams with web3 experiences. Create and deploy smart profiles for your users to engage with them directly within your website or application. Smart profiles can be creative and eliminate the complexity of traditional wallets while adding an extra layer of security to prevent unauthorized access.

With an all-in-one, user-friendly smart profile, explore the future of digital interaction, whether for gaming, immersive experiences, or financial assets. Safeguard your digital assets and personalize your interactions with your audience, rewarding them for their engagement. Smart profiles serve as your gateway to Web3, delivering cutting-edge security measures and versatile cross-platform accessibility. Take control of your audience engagement, explore DeFi, and onboard your users into the world of immersive experiences. Learn more about what you can build with Smart Profile at [DATACURVE](https://datacurve.io) "Unlock new revenue Streams with Web3".

Aura Smart Profiles

Deploy smart wallets for interactive Web3 user experiences

Rainbow Secure is a cyber tech company. Authentication Plugin by Rainbow Secure gives multi-dimensional color & style options, user interaction to protect user logins from attacks like account take over, phishing, BOTs, password reuse, keylogger, help reduce cyber risks & liabilities of a business and meet security compliance regulations.

Use this plugin to secure your Auth0 applications, Okta dashboards, Office, CRM, Cloud, BI, AI, IoT and SaaS applications and even custom application or platform you have internally developed.

Authentication Plugin

Secure user login from account takeover with Rainbow Secure

Automox is cloud-native and globally available, Automox enforces OS & third-party patch management, security configurations, and custom scripting across Windows, Mac, and Linux from a single intuitive console. IT and SecOps can quickly gain control and share visibility of on-prem, remote and virtual endpoints without the need to deploy costly infrastructure. 

Automox

Effortless IT operations for configuration management

Badge enables privacy-preserving authentication for users to enroll and authenticate on any device without storing PII. This enables user-centric privacy, allowing users to issue and revoke digital identity and keys on-demand using biometrics and/or other factors.

The Badge Auth0 connector provides a no-code integration to seamlessly use Badge for privacy-preserving authentication in your Auth0 workflow.

Badge

Add privacy-preserving authentication with Badge

Beyond Identity delivers fundamentally secure, frictionless passwordless authentication to stop credential attacks and account takeovers. It eliminates passwords and the vulnerability and risk they bring, replacing passwords with fundamentally secure universal passkeys.

This empowers you to provide Strong Customer Authentication (SCA) securely without a second device or one time code.

You can also capture user and device security attributes for authentication policy and enable step-up authentication for higher risk actions.


Beyond Identity

Frictionless, secure passwordless authentication

Protecting data from human error, malware and theft gets infinitely more complicated when protection is spread across wide geographic distances and complex network topologies. Designed to simplify the administrative tasks associated with deploying data protection across an entire organization — no matter the size, distribution or sophistication of the environment — Carbonite® Endpoint is a comprehensive, automatic backup solution for all your endpoint devices and the data that resides on them.


Carbonite

Backup your precious digital memories with Carbonite

Circle enables a breakthrough unrivaled secure system of zero trust identity authentication that is cryptographically fused to access control. This revolutionary method of human-in-the-loop zero trust identity authentication puts the human back into the equation for actions, events, and data requiring the highest level of security.  Even when a device is compromised, this can force a human-to-human authentication that would block an attacker from accessing protected data.

Delegated Multi-Factor Authentication - Circle Service allows delegated multi-factor authentication. 




Circle

Credential-free cryptographic zero trust authentication

Cisco Umbrella offers flexible, cloud-delivered security when and how you need it. It combines multiple security functions into one solution, so you can extend protection to devices, remote users, and distributed locations anywhere. Umbrella is the easiest way to effectively protect your users everywhere in minutes.

Cisco Umbrella

Flexible, fast, and effective cloud-delivered security

ClickSend provides SMS messaging that you can use via your Auth0 account. Add the ClickSend SMS Action to send Multi-Factor Authentication (MFA) text messages.  

With this integration you can customise your login page to provide a seamless brand experience for your users. Use smart signals to only show your verification page to users who appear to be high-risk with Auth0’s Adaptive MFA.  

With ClickSend, your MFA messages always get delivered. ClickSend builds business communications software and services — SMS, MMS, Voice, Email and even Fax. All paired with helpful 24/7 support and secure, reliable lightning fast delivery. 


ClickSend

Global SMS using direct routes for rapid, reliable delivery

Cloudentity externalizes authorization away from client and backend services allowing developers to build services faster with out of the box integrations to enforce policies anywhere, including leading API gateways, Kubernetes, Service Meshes and FAAS platforms. We make it easier to deliver cloud-native apps and safer to extend your data to the customers, partners and services that drive your business. 

Cloudentity enables secure data sharing and delivers compliance for Open banking and other regulated industries to secure B2B data sharing.   Our standards-based solution provides advanced OAuth capabilities like mTLS, CIBA and RAR, with rich policy management to secure APIs with fine-grained authorization.

Together Cloudentity and Auth0 provide:

* Pre-configured workspaces supporting Open Banking Uk, Brazil, FDX and CDR  
* Fine-Grained policies for consent management, API Authorization, and tamper-proof audit  
* Dynamic enforcement for all apps and API access / data exchange at the transaction level  
* Data Traceability that tracks how, when, where and under what conditions (consent, fraud and customer authentication types) data is shared with partners, developers, gig workers and other third parties.   

Cloudentity

Frictionless Open Banking and secure data sharing

This integration allows you to restrict access to your applications by country. You may choose to implement Country-based Access controls for various reasons, including to allow your applications to comply with unique restrictions based on where you do business. 

With the Country-based Access integration, you can define any and all countries to restrict persons and entities from those countries logging into your applications. 

Country-based Access control

Easily deploy a whitelabel Web3 wallet using Crossmint with Auth0’s authentication directly on your website or app. You can now enable features, like tokengating and digital customer engagement, using NFTs with just a few clicks.

Crossmint provides developer tooling to make it easy and safe to deploy, acquire, and custody NFTs. Learn more about our products at [crossmint.com](https://crossmint.com).

Create a Web3 wallet

Deploy invisible, embedded NFT wallet directly in your app

Cymatic instantly adds rich and informative user risk insights and analytics to Auth0’s award-winning authentication platform.  With Cymatic’s powerful, real-time risk insights and analytics, you can get a detailed picture of your users’ security hygiene and your organization’s risk exposure-level across logins, sessions, devices, locations, user behaviors and credentials. Cymatic plugs directly within Auth0 forms to ensure a fast and seamless integration and user experience.

Cymatic User Risk Analytics

Visualize and eliminate user login and session risk easily

Cyphlens 2FA.b makes authentication simple and secure by turning your smartphone into a powerful, multi-factor authenticator. Using visual cryptography, it replaces passwords and codes with a quick, secure scan through your phone's camera. Say goodbye to phishing and MFA attacks—Cyphlens 2FA.b ensures a seamless, secure login every time.

Cyphlens 2FA.b 

Secure logins with Cyphlens 2FA.b's camera-based encryption

Dentity makes it easy for customers to build online trust, protect their privacy, and own their digital identity. We offer consumers a no-cost way to create, share, and verify identity credentials, and businesses a new way to issue and verify Verifiable Credentials, increase consumer privacy, and attract and retain customers.

The Dentity OpenID Connect (OIDC) app allows relying parties to verify
credentials held by Dentity users using a Verifiable Presentations, consistent
with the current standards and specifications in the industry (see OpenID
Connect for Verifiable Presentations and Self-Issued OpenID Provider v2).

Dentity Web3 Identity Platform

Decentralized Identity and Verifiable Credentials

Dmarcian helps people deploy DMARC. Enjoy the benefits of improved security, delivery, and organization-wide visibility with DMARC. Offering a service for email domain owners based feedback to give clear visibility of domain usage, simplify email delivery & fight online fraud.

Dmarcian

Secure your domains from email impersonation and phishing attacks with DMARC

This action will allow you to block users from signing up unless their email is a part of your approved domains list.

Domain Based Registration

Approve/Deny Registration based on Domain

Elastic Security combines SIEM threat detection features with endpoint prevention and response capabilities in one solution. These analytical and protection capabilities, leveraged by the speed and extensibility of Elasticsearch, enable analysts to defend their organization from threats before damage and loss occur.

Our Auth0 integration provides easy ingestion of Auth0 events to aid with threat detection and incident response with Elastic Security. All events are mapped to the Elastic Common Schema, allowing you to easily analyze, correlate and visualize events right away.

Elastic Security

Search, visualize, and analyze Auth0 events with Elastic Security

Thousands of businesses around the world rely on us for their business communication - from retailers and financial institutions to government bodies and education providers (talk about flexible communication channels!) As a global business we have offices in Nottingham, Barcelona and Melbourne - and a talented team of 140! At Esendex, we do things differently. From the significant investment in our people and technology infrastructure, to 24/7 monitoring of all our platform, we're able to give complete peace of mind to our customers. With direct network connections and a large team of in-house developers to continually develop our messaging technology, we're able to provide the best business communication solutions on the market.

Esendex

Esendex is an SMS service that integrates with Auth0 to offer multi-factor verification

Ethyca is a cutting-edge data privacy management platform designed to help businesses automate and simplify their compliance with global data protection regulations such as CPRA, GDPR, and PIPEDA. By offering a suite of privacy tools, Ethyca enables organizations to efficiently manage personal data while maintaining a high level of security and transparency. This comprehensive solution empowers businesses to meet the growing demands of data privacy regulations, reduce risks associated with non-compliance, and build trust with their customers and partners, and reduce the amount of “shadow IT” in their environments. 

The Ethyca integration with Auth0 enables customers to map customer data stored in Auth0, and process Data Subject Requests (DSRs) for access and deletion with ease.

Ethyca Inc.

This guide provides instructions for integrating with Fides.

Feroot is the first way to manage and automate everything you need to protect your data assets on the client-side of your web applications and websites – from credit card data to login credentials, ePHI, and more. All in one, online platform.

Feroot

All-in-One Client-Side Risk Management Platform

Protect your login flow with accurate device identification and real-time risk detection. This Action runs as the first step in your post-login flow, checking for unrecognized devices, suspicious characteristics, and signs of bot activity to help you catch account takeovers and fraud before they happen. 
 
Fingerprint is a device intelligence platform that analyzes over 100 browser and device signals to generate a stable identifier for each visitor, even if they’re in incognito mode, using a VPN, or have cleared cookies. This is part one of a two-part integration. For the integration to work correctly, both Actions must be installed and configured, and some additional client-side code must be added to your site.

Fingerprint Login Part 1

Protect accounts with industry-leading device intelligence

Protect your login flow with accurate device identification and real-time risk detection. This Action runs as the first step in your post-login flow, checking for unrecognized devices, suspicious characteristics, and signs of bot activity to help you catch account takeovers and fraud before they happen. 
 
Fingerprint is a device intelligence platform that analyzes over 100 browser and device signals to generate a stable identifier for each visitor, even if they’re in incognito mode, using a VPN, or have cleared cookies. This is part two of a two-part integration. For the integration to work correctly, both Actions must be installed and configured, and some additional client-side code must be added to your site.

Fingerprint Login Part 2

The Fingerprint and Okta Customer Identity Cloud (CIC) powered by Auth0 integration is designed to provide a unique identifier for each of your user's devices. This is a powerful signal that helps reduce fraud and improve the user experience.

The integration is powered by Fingerprint Pro's device detection technology, which is an industry-leading solution that quickly and accurately identifies the characteristics of a browser or device. The device information, with unparalleled accuracy, is then used to create a unique and immutable device fingerprint that can be used to securely identify a user's device and detect any malicious activity.

Fingerprint Pro

The most accurate device identity platform for high-scale apps

Haventec Authenticate provides a genuinely passwordless technology that completely eliminates passwords, shared secrets and friction.

By reimagining authentication – from a central record of passwords to a decentralised identity and a genuinely private secret – enterprises can rethink how they build safe, simple and secure digital experiences.

With Haventec Authenticate, your customers and employees will enjoy exceptionally secure yet beautifully simple user authentication across web and mobile applications.

Haventec

Single-step Passwordless Multi-factor Authentication

ID.me provides secure identity proofing, authentication, and community affiliation verification for government and businesses across sectors.

The ID.me Auth0 post-login integration is for both identity proofing and community verification. This can be configured within your existing Auth0 flows to trigger verification appropriate to your use cases.

ID.me

Verify your users identity and community affiliations with ID.me.

Give employees and students the tools they need to have more profound moments at work and in the classroom. Designed to automate device management for you while driving end-user productivity and creativity, Jamf Pro (formerly Casper Suite) is the Enterprise Mobility Management tool that empowers IT pros and the users they support by delivering on the promise of unified endpoint management for Apple devices.


jamf Pro

Manage and protect all your iPad, iPhone, Mac and Apple TV devices from anywhere

Keyless enhances customer and employee experiences and protects their privacy through passwordless multi-factor authentication that eliminates fraud, phishing and credential reuse - from anywhere, at any time, and from any device.

By leveraging patented Zero-Knowledge Biometrics (ZKB™), we enable organizations to adopt biometric authentication by eliminating their need to store and process biometric data, passwords, personal cryptographic keys and other sensitive information.

Keyless exceeds strictest regulatory requirements such a GDPR, CCPA, PSD2 and complies to open banking authentication requirements.

Keyless

Privacy-preserving passwordless authentication for your users

With Kong and Auth0 you can implement OIDC based authentication processes to protect your APIs.

API gateway authentication is an important way to control the data that is allowed to be transmitted using your APIs. Basically, it checks that a particular consumer has permission to access the API, using a predefined set of credentials.

Kong Gateway has a library of plugins that provide simple ways to implement the best known and most widely used methods of API gateway authentication. Here are some of the commonly used ones:

- Basic Authentication
- Key Authentication
- OAuth 2.0 Authentication
- LDAP Authentication Advanced
- OpenID Connect

Please, refer to the following link to read more about [API Gateway authentication](https://konghq.com/learning-center/api-gateway/api-gateway-authentication)

Auth0 is one of the main IdPs in the marketplace today. Kong, on the other hand, is the world’s most popular API gateway, built for hybrid and multi-cloud and optimized for microservices and distributed architectures. The Auth0 and Kong integration provides a powerful and flexible solution for secure API Management infrastructures.

Kong API Gateway

The API gateway built for distributed architectures

KrakenD is more than a typical proxy that forwards clients to backend services, but a powerful engine that can transform, aggregate or remove data from your own or third party services. KrakenD also implements the Backend for Frontend and Micro-frontends patterns to eliminate the necessity of dealing with multiple REST services, isolating clients from the micro-service implementation details.

Create a modern API with KrakenD integrated with Auth0 at three different levels:

1. **End-users validation** for those using an app of any kind (3-legged auth), and then users provide a token inside a header or cookie.
2. **Machine-to-gateway communication**. Machine-to-machine, APIs talking to APIs, automated systems, and other uses of service-to-service communication.
3. **Gateway-to-machine communication**, for those cases where the gateway also needs to access protected backends requiring **client credentials**.

KrakenD API Gateway

Validate end-users and machine-to-machine requests

Kudelski Security’s MDR ONE Service combines MDR services and technology to deliver a fully integrated solution. This 24/7, top-notch service is delivered by the Cyber Fusion Center, a global team of security experts with the experience, tools, and threat intelligence necessary to provide clear and actionable remediation recommendations on verified security incidents.

The direct ingestion of logs into Kudelski Security’s XDR platform expands visibility and protection on Auth0’s world-leading access management solution. All the security events are quickly collected, triaged, and analyzed by the CFC team, in order to provide the highest security and confidence to the clients.

MDR ONE

Monitor and protect your Auth0 tenant 24/7 with MDR ONE

With Mitto and Auth0 you can reliably connect with global customers through the industry's most trusted SMS enabler. Mitto allows you to alert, notify, confirm and promote your message on the number one preferred channel for communications. We are designed to satisfy; with an average worldwide open rate of 98% SMS is the proven leader in driving positive customer experiences. Mitto is a cost efficient Auth0 sms solution being more economical than other A2P messaging, Mitto SMS also reduces missed appointment, delivery issue & account fraud costs.

Mitto is a robust and reliable platform backed by top-level support to integrate with your identity needs on Auth0.

Mitto

Reliably connect with global customers through the industry's most trusted SMS enabler

MSG91 provides an omni-channel communication service that can be used by Auth0 to deliver multi-factor verification via text messages, Email, WhatsApp, RCS and Voice Call. 

Make your business more communicable, effective, secure, and reliable with MSG91’s upgraded features and security!

We, here at MSG91, focus on innovation and ease of use services to our core offerings that include Transactional SMS, Email API, Voice API, WhatsApp APIs, and a dedicated SendOTP platform for two-factor authentication.

Also, don’t forget to check out our insane applications : 
1. HELLO - that puts all your customer support interactions in one place making it a complete customer contact center solution, 
2. Segmento - to segment distinct customer groups automatically and not to forget our platform 
3. Campaign - which helps you broadcast any relevant information to customers using multiple communication channels with one click.  

With MSG91, you can get:
- Guaranteed delivery
- Real-time analytics
- Easy to integrate communication APIs

From developers to businesses, MSG91 is there for you. You only pay for what you use and nothing more. Contact us today to bring innovation to your business communication world.

[Signup At MSG91](https://control.msg91.com/signup/?utm_source=auth0)


MSG91

Communicate worldwide via SMS, Whatsapp, Emails, Voice and RCS.

ngrok is a simplified API-first ingress-as-a-service that adds connectivity, security, and observability to your apps with no code changes.
With ngrok, you can connect any local and remote apps, IoT devices, and private networks on the internet using Auth0 login. All without port forwarding, dynamic DNS, and VPN drama.

ngrok

Get remote Web Apps and APIs online instantly with Auth0 security

Okta Workflows is a powerful no-code identity automation and orchestration platform. With Workflows, you can personalize your identity flows and automate post-login events – without writing a line of code.

Instead of allocating developer resources to create and maintain custom scripts, you can leverage pre-built templates or build personalized flows using a simple drag-and-drop interface. This enables you to easily automate processes and build tailored experiences that drive growth and enhance security.

Here are some examples of what you can accomplish with Workflows no-code platform:

- Drive growth by personalizing the customer experience: Automatically link duplicate user accounts, add them to your CRM, and initiate personalized marketing campaigns or login experiences.

- Simplify the customer on-boarding flow: Instantly provision customers to downstream applications such as support pages or community forums.

- Respond rapidly to suspicious logins: Automatically create a ticket with essential details about the event and instantly alert your security operations team.

- Enhance security with stricter authentication: Trigger the requirement for stricter authentication during the next login after a prolonged period of inactivity.

- Simplify consent management: Capture consent, synchronize it with your backend systems, and register it across multiple devices.


Okta Workflows

Accelerate development by leveraging no-code automation to personalize your customer identity flows

Our award-winning cloud-based application enables organizations to utilize fast automated business email protection by quickly configuring SPF, DKIM and DMARC for all legitimate email sources in weeks, not months. In fact, 67% of users got to full protection (p=reject) without consulting our support team thanks to the power and sophistication of OnDMARC.



onDMARC

Stop spoofing attacks and block email impersonation with OnDMARC

On Guard is a SaaS solution specialized in connection risk management and adaptive authentication **without offering a complete connection solution**. We focus on behavior and risk analysis to determine if sending an email to warn the user of a suspicious login is necessary. 
 
We do not block any login, just warn users and let them do appropriate actions.

OnGuard

Oort provides a protective layer on top of IAM products, including Auth0, by pulling users data and activity (via APIs and event logs), and gives security teams a unique ability to detect identity threats and reduce their organizations’ identity attack surface.

Oort Identity Security

This action can be added to user login flows to verify that a user is not logging in with a domain that has been determined to be malicious. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

Pangea provides intelligence data from industry leading partners and normalizes responses to help you quickly identify malicious domains. All of this happens through a unified API and SDK - with no contracts or direct integrations to the provider required. For example, if DomainTools is chosen as the provider, a queried domain will return a standard score with an easy to interpret API response. This is then used by the action to accept or reject the user's request.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Domain Check

Use Pangea APIs to verify user is not from a suspicious domain

This action can be added to user login flows to verify that a user is not logging from an embargoed country. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

The Pangea Embargo service lets developers quickly check IPs and country codes against known sanction and trade embargo lists. Developers can use the Pangea-provided lists to determine where client activity is coming from and if any special action is needed. The Pangea lists are sourced from official government entities and are kept up to date with the latest changes.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Embargo Check

Use Pangea APIs to verify user is not from Embargoed Country

This action can be added to user login flows to verify that a user is not logging in from an ip that has been determined to be malicious. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

Pangea provides intelligence data from industry leading partners and normalizes responses to help you quickly identify malicious ips. All of this happens through a unified API and SDK - with no contracts or direct integrations to the provider required. For example, if Crowdstrike is chosen as the provider, a queried ip will return a standard score with an easy to interpret API response. This is then used by the action to accept or reject the user's request.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea IP Check

Use Pangea APIs to verify user is not from a suspicious ip

Use Pangea APIs to verify user is not using a Proxy

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Is Proxy

Use Pangea APIs to verify user is not using a Proxy

Pangea Secure Audit Log extends Auth0 log retention to up to 10 years, from the default max of 30 days (for Enterprise customers). Meet essential compliance requirements for SOC2, HIPAA, and others with a simple developer-first API, enabled in minutes. Expose authentication events back to your app's admins, tenants, or users, with an embeddable log viewer control.

Pangea Log Streaming

Store Auth0 log events in the Secure Audit Log service

This action can be added to user new user account creation flows to perform domain and embargo checks before allowing account creation. Once added to the flow, new users will be validated against Pangea APIs and have their logins accepted or rejected accordingly. It uses a variety of Pangea security APIs to validate and record new user registrations:

##Pangea Domain Intel## - This API detects users registering from malicious or risky domain names by retrieving intelligence about known domain names through a combination of providers. It contains intelligence on over 390 million domain names.
##Pangea Embargo Check## - This API resolves the registrant's IP address to its country and cross-references it with a list of embargoed or export restricted countries. This configurable API can be used to comply with ITAR export restrictions in the US, or other export restrictions in other parts of the world.
##Pangea Secure Audit Log## - Both positive and negative results are logged to the Pangea Secure Audit Log service, which provides immutable, and cryptographically verifiable tamperproof audit logging capabilities.

Configuration can be done on the Pangea console to view and manage audit logs (redaction and retention), manage embargo lists and select providers for domain scoring. As more services are added to the Pangea catalog, this integration will be updated to include additional validation steps.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Validate Registration

Use Pangea Security APIs to validate new user registrations

[Panther](https://panther.com/) is a cloud-native threat detection platform that transforms terabytes of raw logs per day into a structured security data lake to power real-time detection, swift incident response, and thorough investigations in a code-driven way. Panther enables customers to manage their detections as code and provides out-of-the-box integrations for dozens of critical log sources, Panther solves the challenges of security operations at scale. Learn more: https://panther.com/integrations/logs/auth0/

Panther Log Stream

This Action allows you to configure the number of days a password is valid before it expires and the user must rotate it.


Password Rotation

# Verify users your way

Integrate your authentication experience with any of **Persona’s fully automated identity verification flows**. 

### Persona makes it easy to: 

1. Set granular controls over configurable verification checks that allow you to scalably approve or decline users based on device metadata, user-inputted data, and verification data
2. Convert good users faster by dynamically adjusting friction based on real-time risk signals 
3. Collect PII and incorporate any combination of verification building blocks (Government ID, Selfie, Watchlists, Age, Document, and more) into your experience

Trusted by both fast-growing startups and the most established companies in the industry, Persona’s platform allow companies to scalably tackle any identity challenge from automating onboarding decisions to fighting fraud.

### Get started for free and try the Persona platform with one of our most widely-trusted solutions: Government ID verification. 

Visit [Persona](https://app.withpersona.com/dashboard/register?utm_source=auth0&utm_medium=pbp&utm_audience=a&utm_campaign=acq_pmark_pbp_auth0-marketplace) to create a Sandbox account, and connect your Auth0 and your Persona instance to get started. 

Persona Verification

Verify users with end-to-end identity flows, like KYC or Gov ID and selfie

Photolok login is Simple, Convenient, Secure

1. Simple – photos are easy to remember and simple to change
2. Convenient – no password rules, replacement photos autosaved in seconds
3. Secure – photos can be labeled for remote security situations to protect against BOTS, phishing, shoulder surfing, and forced entry.  In addition, Photolok’s authenticator option protects against SIM card swapping

Photolok’s labeling and security alerts work to enhance the user’s protection in remote and public locations.  The “Duress” photo works like a silent alarm that sends security alerts to designated IT and security personnel when the user is forced to enter their device.  The “1-Time” photo protects against shoulder surfing because it’s deleted from the user’s account after one use.  A login alert is sent to the user to protect against unauthorized entry.

Photolok MFA IdP

Photolok MFA IdP using photos - not passwords

Plivo simplifies business communications by offering a simple, quick, and scalable way to modernize customer communications. Businesses of all sizes — from growing startups to public companies — rely on Plivo to deliver better customer experiences. Plivo's enterprise-grade communications platform includes a premium carrier network with connectivity in more than 190 countries, an API platform for messaging and voice calls, and solutions for sales and support teams. The Plivo team brings deep experience in communications and modern software to address the needs of today's businesses — quality, scale, innovation, and agility.

Using Plivo's Messaging platform and Auth0 you can send SMS messages to send multi-factor verification codes via text messages. This integration will add SMS-based MFA to the login flow for the tenant in which you're working.

Plivo

SMS-based authentication to enable stronger login

With the Prelude and Auth0 integration, you can deliver multi-factor verification via text messages (SMS and online messaging) to multiple countries, with a single interface. 
 
Prelude is a powerful and easy-to-use API that lets you send OTP codes worldwide using the most appropriate route and channel depending on your user’s context. Businesses typically see a 20-30% increase in conversion compared with their previous provider, while saving 30-40% monthly. Prelude also detects and prevents fraud including SMS pumping, using algorithms trained on tens of millions of data points.

Prelude

Powerful and easy-to-use API that lets you send OTP codes

This integration allows you to require users to verify their emails before signing in.  Auth0 sends verification emails to users automatically when they register.  Once they receive the email, they can click to link to set their email.  Additionally, you can leverage the Auth0 Management API to set a user's email verification status manually if you have verified their email outside of the default Auth0 workflow.

Require Email Verification

Rootly is a turnkey incident response command centre that brings the best reliability practices from Google, Netflix, Amazon to those without a million-dollar budget. An all-in-one platform that streamlines collaboration, communication, and learning. It automates away manual toil engineers suffer through today and captures data-driven insights. With Rootly, companies accelerate their incident resolution and learn how to prevent them in the future.

Rootly

### Overview
At SecureFlag, we teach Developers, QA, and DevOps engineers how to identify vulnerabilities and remediate the code of vulnerable applications running in real development environments.


SecureFlag

Hands-on, secure coding training platform for engineers

We help software teams build better software, faster. Sentry.io is an open-source full-stack error tracking system which supports a wide range of server, browser, desktop and native mobile languages and frameworks including PHP, Node. js, Python, Ruby, C#, Java, Go, React, Angular, Vue, JavaScript and more. One million developers at over sixty thousand organizations ship better software faster with Sentry.

Sentry

SSO for Sentry's app monitoring platform that helps diagnose, fix, and optimize code

This solution extends the Auth0 login flow with continuous access management and advanced authorization decisions based on human-readable policies. The solution consists of an Auth0 post-login action, the SGNL access service API, a graph directory, data ingestion adapters, and a human-readable policy for making authorization decisions. An Auth0 post-login action is configured to send authorization requests to the SGNL access service via the SGNL REST API as part of an Auth0 login flow. The SGNL access service responds to the post-login action with allow or deny decisions considering the context of the authorization request sent by Auth0. For example, context may consist of the principal making the request, the application being accessed, the client IP Address, the HTTP verb (e.g., POST, GET, PATCH), and the action (e.g., access, update, create, custom action, etc.). If the request is denied, the post-login action returns a denial to the Auth0 authorization server, which stops the OAuth 2 authorization request flow (will not return the authorization code) and redirects to the protected application with a customized error message. 

SGNL for Auth0

SGNL for Auth0 post-login authorization flows

Powered by industry-leading AI and a comprehensive global data network, Sift's solutions safeguard customer accounts against fraud. By integrating MFA directly with Auth0, Sift can bolster your login flows with real-time risk assessments to accurately detect and prevent account takeover attempts.
 

 
Sift's account takeover protection helps you maintain customer trust, reduce operational costs, and grow revenue - all while delivering frictionless experiences for legitimate users.

Sift ATO - Identity Defense

Stop account takeovers (ATO) with industry-leading AI-driven MFA

Protect your customers from unauthorised access with Two Factor Authentication (2FA) or a One Time Password (OTP) via Spryng. Provide secure, reliable and fast one-time passwords and log-in codes to your customers.

Spryng is the SMS Authentication Specialist in Europe with all the certifications such as ISO27001 and NEN7510. [More information and a free trial](https://www.spryng.nl/en/sms-authentication ).

Spryng

Spryng offers the most secure and safe login with SMS authentication

Secret Server is a surprisingly easy-to-use password management tool that enables you to start managing privileged accounts fast. Installation takes just 15 minutes, and you're up and running. A perfect solution for IT teams that don't yet have budget for a larger deployment.


Thycotic Secret Server

Protect your privileged accounts with our enterprise-grade solution

Combining authID VerifiedTM with Auth0 makes going passwordless for your customers easy. End social engineering phishing attacks that prey on human behavior and vulnerable legacy MFA. Secure the entire user journey when users log in using Verified’s FIDO2 cryptographic security, the latest and fastest-growing passwordless authentication technology on the market.  

Users then use their cloud-based biometric selfie to seamlessly prove who they are, when perfprove who they arectivities such as making big purchases, account changes, adding new devices, and more. Customize the integration based on your business needs,  so that you always know the human behind every access request – that's Verified’s Human Factor Authentication™. 

Verified Passwordless MFA

Prevent credential-based attacks and stop account takeovers

## Verosint – Attack Detection and Prevention

Verosint provides real-time account attack and threat intelligence to reveal cybercriminals hiding in user accounts and blocks attacks before they can cause harm. Verosint adds free account attack detection, notification, investigation and automated prevention for Okta including:

* Account attack and fraud dashboards
* Behavioral, threat and account analytics
* Device fingerprinting
* Credential intelligence
* Powerful OSINT signaling

...for protection against: 
* Account Takeover
* Credential stuffing attacks
* Account sharing
* Fake account creation
* and many other account-based attacks

![Verosint Threat Insights](https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png)


### Stop Advanced Account Attacks

Immediately detect account takeover, fake accounts, credential stuffing attacks, and more. Use AI to scan the account attack surface and focus quickly on attack insights to save you time and stay ahead of emerging risks.

### Deep Visibility Into Accounts

Gain deep visibility into user accounts and graphically see hidden relationships to reveal fake accounts, account sharing, and more. Expose suspicious user activity and discover prior attacks including compromised accounts already residing in your user base.

### Powerful Fraud Prevention

Stop fraud before it starts by blocking account attacks and compromise at their source. Includes account fraud dashboards and investigative tools for fraud discovery and case management.




Verosint Event Streaming

Stop account attacks with deep visibility and advanced notification and prevention.

You can configure Auth0 to stream logs into Verosint to detect account fraud. Logs ingested by Verosint will create event and account prints in the [SignalPrint Explorer](https://docs.verosint.com/docs/using-signal-print) and show details in the [Fraud Dashboards](https://docs.verosint.com/docs/fraud-detection). 

Verosint Log Streaming

Stream events to Verosint to detect account fraud

Verosint provides real-time account attack and threat intelligence to reveal cybercriminals hiding in user accounts and blocks attacks before they can cause harm. Verosint adds free account attack detection, notification, investigation and automated prevention for Okta including:
 

 
* Account attack and fraud dashboards
 
* Behavioral, threat and account analytics
 
* Device fingerprinting
 
* Credential intelligence
 
* Powerful OSINT signaling
 

 
...for protection against: 
 

 
* Account Takeover
 
* Credential stuffing attacks
 
* Account sharing
 
* Fake account creation
 
* and many other account-based attacks
 

 
![Verosint Threat Insights]([<a href="https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png">https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png</a>])

Verosint Workflows

Verosint – Attack Detection and Prevention

WorkOS provides a modern API platform for implementing enterprise-grade authentication with ease. Save months of development time integrating and debugging SAML and OpenID Connect protocols. 
 
WorkOS was designed to seamlessly fit into your existing application. With a few lines of code, you can offer the most popular enterprise sign-in options and support your biggest customers as quickly as possible.

WorkOS

[WunderGraph](https://wundergraph.com/) is a secure and robust developer framework that focuses on providing a single solution for all your application integrations. 

Turn your services, databases and 3rd party APIs into a secure unified API in just a few minutes.

Benefits include:
- Combine all your data sources into a unified GraphQL Schema
- Expose GraphQL operations through JSON-RPC - functions
- Auto generate custom type-safe API Clients
- Customizable gateway logic with TypeScript
- Modern security integrations (including Auth0)
- Build upon standards like GraphQL, OpenAPI, OAuth2, S3...
- [100% Open Source](https://github.com/wundergraph/wundergraph), No vendor lock-in

WunderGraph

Access all your data through a single API

WWPass Identity Provider for Auth0 uses OpenID Connect and Oauth2 to replace insecure usernames and password, and inconvenient traditional Multi-factor authentication with modern, secure and convenient Right-factor Authentication -- technology which uses distributed secure credential storage to protect regular and privileged accounts form phishing, credential theft and other types of hacker attacks.

Addition of WWPass login significantly improves security of access, removes overhead associated with password resets, and simplifies access to secured sites for users. It allows to maintain balance between low cost and simple login with mobile phone app, and ultra-secure access with hardware tokens, which completely eliminates the possibility of unauthorized remote access with stolen credentials.

Fully compliant with strong customer authentication standards like GDPR, NIST and open banking authentication requirements.

**[How to add WWPass multi-factor authentication to Auth0](https://www.youtube.com/watch?v=MvGAm_Z047I&t=3s)** 
In this video we walk you through adding WWPass authentication to Auth0 and explain how to set up a developer account with WWPass. We have plenty of documentation to help you get started and if additional support is needed, feel free to reach out at support@wwpass.com anytime.

WWPass Login

Secure login to Auth0 SSO without usernames, passwords and OTP

Enable fine-grained authorization, passwordless, and multi-factor authentication for your applications. These identity solutions improve user experience while reducing the risk of unauthorized entry.