With infobip and Auth0, you can connect to multiple countries with a single interface and enjoy all the benefits of an industry-leading platform that ensures compliance and value. Verified SMS helps increase customer trust in brand communication and raise awareness at the same time by including the brand name, logo, description, link preview, and verification of each message – enhancing the customer experience for all types of SMS communication.

Infobip

Global SMS messaging built for scale, speed, and deliverability

iVALT replaces 2FA digits with “1-Click” Zero Trust Identity. Each user simply downloads the
iVALT mobile app and registers their mobile number and a valid email address. Once registered
and when using Auth0, the iVALT Action will notify the user to accept and present FaceID (iOS
or Android) on their mobile phone. If biometrics pass, the user is granted access.

While the 1-Click user experience is far superior, iVALT also captures, verifies and returns user
device ID, location, and time stamp. This information can be used by the Auth0 customer or
the user themselves to set geofences and time windows for their authentications to greatly
enhance security. This is a complete Zero Trust solution by verifying true human identity, while
going much further to protect against identity theft by requiring important contextual variables
to be true as well for access to important applications.

iVALT mobile app users also get iVALT’s DEEPFAKE protection for FREE. Suspicious callers can
be requested during the call to authenticate their identity through the iVALT app. 1-Click on
each end of the connection clarifies the true identity of the caller to the call recipient. iVALT is
marketing this protection for FREE as a “friends and family trust” approach to stopping fake
callers.

iVALT has partnered with leading companies in Post Quantum Encryption (PQE) as well to bring
new cutting-edge solutions to the identity market that are “futureproof”.

1-Click ZERO TRUST IDENTITY

iVALT uses mobile phone biometrics to verify login identity.

Amazon Simple Notification Service (SNS) is a highly available, durable, secure, fully managed pub/sub messaging service that enables you to decouple microservices, distributed systems, and serverless applications. Amazon SNS provides topics for high-throughput, push-based, many-to-many messaging. Using Amazon SNS topics, your publisher systems can fan out messages to a large number of subscriber endpoints for parallel processing, including Amazon SQS queues, AWS Lambda functions, and HTTP/S webhooks. Additionally, SNS can be used to fan out notifications to end users using mobile push, SMS, and email.

Amazon SNS

Fully managed pub/sub messaging for microservices and serverless applications by Amazon

Unlock new revenue streams with web3 experiences. Create and deploy smart profiles for your users to engage with them directly within your website or application. Smart profiles can be creative and eliminate the complexity of traditional wallets while adding an extra layer of security to prevent unauthorized access.

With an all-in-one, user-friendly smart profile, explore the future of digital interaction, whether for gaming, immersive experiences, or financial assets. Safeguard your digital assets and personalize your interactions with your audience, rewarding them for their engagement. Smart profiles serve as your gateway to Web3, delivering cutting-edge security measures and versatile cross-platform accessibility. Take control of your audience engagement, explore DeFi, and onboard your users into the world of immersive experiences. Learn more about what you can build with Smart Profile at [DATACURVE](https://datacurve.io) "Unlock new revenue Streams with Web3".

Aura Smart Profiles

Deploy smart wallets for interactive Web3 user experiences

CLEAR strengthens security during account recovery by providing identity proofing at this critical touchpoint – without compromising user experience. To recover their account or reset their password, users are seamlessly directed to CLEAR to securely verify they are who they say they are. For the 30+ million existing CLEAR members, this process is instant with just a selfie, while new users complete a quick, one-time process for faster future verifications. With over 60 verification checks, including liveness detection and source corroboration, CLEAR enables partners to customize solutions that meet specific business and compliance needs.

CLEAR1 - Account Recovery

Verify the person beyond the device with CLEAR.

CLEAR strengthens security with seamless identity proofing, ensuring users are who they claim to be at login – without compromising their experience. After successfully logging into their Auth0-hosted account, users are prompted to verify their identity with CLEAR. For the 30+ million existing CLEAR members, this process is instant with just a selfie, while new users complete a quick, one-time process for faster future verifications. With over 60 verification checks, including liveness detection and source corroboration, CLEAR enables partners to customize solutions that meet specific business and compliance needs.

CLEAR1 - Login

Enable secure login experiences with CLEAR.

ClickSend provides SMS messaging that you can use via your Auth0 account. Add the ClickSend SMS Action to send Multi-Factor Authentication (MFA) text messages.  

With this integration you can customise your login page to provide a seamless brand experience for your users. Use smart signals to only show your verification page to users who appear to be high-risk with Auth0’s Adaptive MFA.  

With ClickSend, your MFA messages always get delivered. ClickSend builds business communications software and services — SMS, MMS, Voice, Email and even Fax. All paired with helpful 24/7 support and secure, reliable lightning fast delivery. 


ClickSend

Global SMS using direct routes for rapid, reliable delivery

This integration allows you to restrict access to your applications by country. You may choose to implement Country-based Access controls for various reasons, including to allow your applications to comply with unique restrictions based on where you do business. 

With the Country-based Access integration, you can define any and all countries to restrict persons and entities from those countries logging into your applications. 

Country-based Access control

Easily deploy a whitelabel Web3 wallet using Crossmint with Auth0’s authentication directly on your website or app. You can now enable features, like tokengating and digital customer engagement, using NFTs with just a few clicks.

Crossmint provides developer tooling to make it easy and safe to deploy, acquire, and custody NFTs. Learn more about our products at [crossmint.com](https://crossmint.com).

Create a Web3 wallet

Deploy invisible, embedded NFT wallet directly in your app

Cyphlens 2FA.b makes authentication simple and secure by turning your smartphone into a powerful, multi-factor authenticator. Using visual cryptography, it replaces passwords and codes with a quick, secure scan through your phone's camera. Say goodbye to phishing and MFA attacks—Cyphlens 2FA.b ensures a seamless, secure login every time.

Cyphlens 2FA.b 

Secure logins with Cyphlens 2FA.b's camera-based encryption

-	Connect your authentication and sign-up flows with DataGuard to collect customer consent and preferences across multiple touchpoints.
-	Be GDPR, CCPA, PECR, ePrivacy compliant from day one using DataGuard and Auth0 together.
-	Use Consent and Preferences to tailor user experiences and improve customer engagement.
-	Empower your customers to manage their consents via DataGuard integrations across your Auth0-enabled applications.
-	Get up and running in less than 15 minutes.


DataGuard

Capture, retain and grow consent for GDPR compliance

This action will allow you to block users from signing up unless their email is a part of your approved domains list.

Domain Based Registration

Approve/Deny Registration based on Domain

Thousands of businesses around the world rely on us for their business communication - from retailers and financial institutions to government bodies and education providers (talk about flexible communication channels!) As a global business we have offices in Nottingham, Barcelona and Melbourne - and a talented team of 140! At Esendex, we do things differently. From the significant investment in our people and technology infrastructure, to 24/7 monitoring of all our platform, we're able to give complete peace of mind to our customers. With direct network connections and a large team of in-house developers to continually develop our messaging technology, we're able to provide the best business communication solutions on the market.

Esendex

Esendex is an SMS service that integrates with Auth0 to offer multi-factor verification

Protect your login flow with accurate device identification and real-time risk detection. This Action runs as the first step in your post-login flow, checking for unrecognized devices, suspicious characteristics, and signs of bot activity to help you catch account takeovers and fraud before they happen. 
 
Fingerprint is a device intelligence platform that analyzes over 100 browser and device signals to generate a stable identifier for each visitor, even if they’re in incognito mode, using a VPN, or have cleared cookies. This is part one of a two-part integration. For the integration to work correctly, both Actions must be installed and configured, and some additional client-side code must be added to your site.

Fingerprint Login Part 1

Protect accounts with industry-leading device intelligence

Protect your login flow with accurate device identification and real-time risk detection. This Action runs as the first step in your post-login flow, checking for unrecognized devices, suspicious characteristics, and signs of bot activity to help you catch account takeovers and fraud before they happen. 
 
Fingerprint is a device intelligence platform that analyzes over 100 browser and device signals to generate a stable identifier for each visitor, even if they’re in incognito mode, using a VPN, or have cleared cookies. This is part two of a two-part integration. For the integration to work correctly, both Actions must be installed and configured, and some additional client-side code must be added to your site.

Fingerprint Login Part 2

### ID DataWeb - Attribute Exchange Network (AXN)

ID DataWeb operates a SaaS Identity Verification and Fraud Detection solution called the Attribute Exchange Network (AXN.) Our cloud service hooks in with many of the industry’s top identity verification and fraud detection point solutions, bringing all the most trustworthy methods of establishing digital trust to a single platform. On top of this network, ID DataWeb provides an orchestration layer for configuring multi-step verification workflows, and flexible integration options (hosted redirect based on OpenID Connect, or full REST API.) The system provides fully configurable scoring, policy decision, and workflow routing capabilities to make it simple to tailor your Verification Workflow specifically to your organization's requirements.

### ID DataWeb Identity Verification

ID DataWeb offers three primary methods of Identity Verification, which can be thought of as “building blocks” to an overall Identity Verification Workflow. A Verification Workflow allows an organization to set up a conditional multi-step process for proving a user's identity. If the user passes the first method, they can be automatically approved and marked as trusted in Auth0. This can then be used for downstream application access and authorization decisions.

### Verification Templates

- **MobileMatch**: Verifies the user has a phone registered to who they’re claiming to be. [Video overview and demo](https://www.iddataweb.com/templates/mobilematch/)

- **BioGovID**: Verifies the user’s provided selfie matches an authentic government issued ID. [Video overview and demo](https://www.iddataweb.com/templates/biogovid/)

- **Dynamic KBA** - Verifies the user knows answers to personalized questions about who they’re claiming to be. [Video overview and demo](https://www.iddataweb.com/kba/).

ID DataWeb Verification

Real time & self service global identity verification

ITOCHU Techno-Solutions Corporation provides the Carrier Identity Verification feature of SELMID. Carrier identity verification uses the contract information of each carrier to verify your identity.



Identity Verification (SELMID)

Perform reliable identity verification using carrier information

ID.me provides secure identity proofing, authentication, and community affiliation verification for government and businesses across sectors.

The ID.me Auth0 post-login integration is for both identity proofing and community verification. This can be configured within your existing Auth0 flows to trigger verification appropriate to your use cases.

ID.me

Verify your users identity and community affiliations with ID.me.

Use this Action in a Login Flow to create a corresponding Lead in Salesforce.
 

 
The Lead record is created with:
 

 
* Name
 
* Email
 
* Lead source (customizable)
 
* Company (optional, based on a user metadata field of your choice)
 
* User ID in Auth0/Okta CIC (optional, requires a Salesforce Custom Field)
 

 
The Salesforce Lead ID is stored against your user profile as customizable app metadata field.
 

 
This integration respects duplicate rules in Salesforce. If a duplicate is found, a second Lead won’t be created. The user metadata field will be updated in Auth0 to match the duplicate.
 

 

For more complex needs, please [visit the Kilterset](https://www.kilterset.com/okta/cic-auth0-to-salesforce-integration?source=auth0_marketplace_simple_salesforce_leads) website to see how we can help you [connect Auth0 or Okta CIC with Salesforce](https://www.kilterset.com/okta/cic-auth0-to-salesforce-integration?source=auth0_marketplace_simple_salesforce_leads). Kilterset is an Auth0 partner that specializes in syncing and integrations.

Kilterset's Simple Salesforce Leads

LexisNexis® Risk Solutions fraud and identity management solutions combine transformative physical and digital identity insights with advanced decisioning and authentication technology to deliver a more precise view of customer identity risk. Our solutions help your business to raise the effectiveness and accuracy of Decision Analytics, Identity and Device Verification and Authentication and Investigations. 
 
LexisNexis Risk Solutions Dynamic Decision Platform leverages insights from billions of data assets to digitally perform risk assessment.  From the Dynamic Decision Platform Portal, the configured risk policy will orchestrate LexisNexis Risk Solutions products such as  LexisNexis® ThreatMetrix®, LexisNexis® BehavioSec®, LexisNexis®  Emailage®, LexisNexis® PhoneFinder, InstantID® and LexisNexis® FlexID. When the LexisNexis Risk Solutions integration is combined with a Auth0 transaction, such as a login event, the LexisNexis Risk Solutions integration results in a risk score mapped to defined outcomes such as step-up authentication, passing without further friction, or rejecting resulting in blocking the transaction. 

LexisNexis

Confidently recognize genuine users, detect fraud

LOX24 is a service that allows you to easily use the **multifactor authentication** of Auth0 via **SMS** and Text2Speech **calls** worldwide. The highest level of security is guaranteed. LOX24 is an officially registered and supervised telecommunications company and therefore subject to the strict requirements of the German legislator and the European **data protection laws**.

In addition, LOX24 offers first-class **[24/7 support](https://www.lox24.eu/en/support/)**: You can contact the LOX24 team by phone, email or chat at any time and receive fast and professional assistance. The delivery of messages is also guaranteed, as LOX24 is **directly connected** to almost all networks worldwide. This ensures that your SMS messages reach their destination without delay or loss. This also includes **proactive quality management**: you can rely on LOX24 experts to monitor and optimize the performance of the SMS service and to solve any problems that may arise. Besides, the [prices](https://www.lox24.eu/en/price-list/) of [LOX24 SMS Gateway](https://www.lox24.eu/en/sms-gateway/) are extremely favorable and without monthly basic fee.

LOX24 SMS & Voice MFA

SMS and Voice Multifactor Authentication with GDPR Compliance

Luzmo is an embedded analytics platform, purpose-built for SaaS companies. It brings complex data to life with beautiful, easy-to-use dashboards, embedded seamlessly in any SaaS or web platform. With Luzmo, product teams can add impactful insights to their SaaS product in days, not months. And take their product users from data to decisions, rapidly fast.

Interactive, drag & drop dashboards, connected to a variety of data sources, are available in a jiffy allowing relevant data-driven insights and actions for your customers.

Grow your SaaS platform: help your customers grow, make data analysis easy and embed in no time.


Luzmo

From data to decisions, rapidly fast. Embed beautiful, easy-to-use dashboards in your SaaS product in days, not months.

With Mitto and Auth0 you can reliably connect with global customers through the industry's most trusted SMS enabler. Mitto allows you to alert, notify, confirm and promote your message on the number one preferred channel for communications. We are designed to satisfy; with an average worldwide open rate of 98% SMS is the proven leader in driving positive customer experiences. Mitto is a cost efficient Auth0 sms solution being more economical than other A2P messaging, Mitto SMS also reduces missed appointment, delivery issue & account fraud costs.

Mitto is a robust and reliable platform backed by top-level support to integrate with your identity needs on Auth0.

Mitto

Reliably connect with global customers through the industry's most trusted SMS enabler

MSG91 provides an omni-channel communication service that can be used by Auth0 to deliver multi-factor verification via text messages, Email, WhatsApp, RCS and Voice Call. 

Make your business more communicable, effective, secure, and reliable with MSG91’s upgraded features and security!

We, here at MSG91, focus on innovation and ease of use services to our core offerings that include Transactional SMS, Email API, Voice API, WhatsApp APIs, and a dedicated SendOTP platform for two-factor authentication.

Also, don’t forget to check out our insane applications : 
1. HELLO - that puts all your customer support interactions in one place making it a complete customer contact center solution, 
2. Segmento - to segment distinct customer groups automatically and not to forget our platform 
3. Campaign - which helps you broadcast any relevant information to customers using multiple communication channels with one click.  

With MSG91, you can get:
- Guaranteed delivery
- Real-time analytics
- Easy to integrate communication APIs

From developers to businesses, MSG91 is there for you. You only pay for what you use and nothing more. Contact us today to bring innovation to your business communication world.

[Signup At MSG91](https://control.msg91.com/signup/?utm_source=auth0)


MSG91

Communicate worldwide via SMS, Whatsapp, Emails, Voice and RCS.

NotificationAPI is an all-in-one notification service for B2B SaaS teams.

This integration routes your Auth0 Verification Emails through NotificationAPI. This allows you to centrally customize, send, and monitor your application notifications at scale.

NotificationAPI - Email

All-in-one notification service for B2B SaaS

NotificationAPI is an all-in-one notification service for B2B SaaS teams.

This integration routes your Auth0 SMS and Voice verification codes (OTP) through NotificationAPI. This allows you to centrally customize, send, and monitor your application notifications at scale.

NotificationAPI - SMS & Voice

NTT CPaaS is a highly reliable SMS service provided by the NTT Group, which has maintained the No.1 domestic market share. It ensures reliable message delivery with a success rate of over 99% within Japan. In addition to SMS, voice channel is also available. The service is offered with no monthly or initial fees, and both the management console and support are provided in Japanese by default.

NTT CPaaS

A trusted SMS authentication service by NTT Group. 

Okta Workflows is a powerful no-code identity automation and orchestration platform. With Workflows, you can personalize your identity flows and automate post-login events – without writing a line of code.

Instead of allocating developer resources to create and maintain custom scripts, you can leverage pre-built templates or build personalized flows using a simple drag-and-drop interface. This enables you to easily automate processes and build tailored experiences that drive growth and enhance security.

Here are some examples of what you can accomplish with Workflows no-code platform:

- Drive growth by personalizing the customer experience: Automatically link duplicate user accounts, add them to your CRM, and initiate personalized marketing campaigns or login experiences.

- Simplify the customer on-boarding flow: Instantly provision customers to downstream applications such as support pages or community forums.

- Respond rapidly to suspicious logins: Automatically create a ticket with essential details about the event and instantly alert your security operations team.

- Enhance security with stricter authentication: Trigger the requirement for stricter authentication during the next login after a prolonged period of inactivity.

- Simplify consent management: Capture consent, synchronize it with your backend systems, and register it across multiple devices.


Okta Workflows

Accelerate development by leveraging no-code automation to personalize your customer identity flows

Ensure your organization is compliant with privacy regulations while honoring customer choices with OneTrust PreferenceChoice™ and Auth0.

Operationalize Your Privacy, Security and Third-Party Risk Programs. OneTrust products work together to give you the automation, workflows and record keeping you need to comply with GDPR, CCPA, ISO 270001 and hundreds of the world’s privacy and security laws.

OneTrust

Enhance user profiles with consent and communication preferences

On Guard is a SaaS solution specialized in connection risk management and adaptive authentication **without offering a complete connection solution**. We focus on behavior and risk analysis to determine if sending an email to warn the user of a suspicious login is necessary. 
 
We do not block any login, just warn users and let them do appropriate actions.

OnGuard

This action can be added to user login flows to verify that a user is not logging in with a domain that has been determined to be malicious. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

Pangea provides intelligence data from industry leading partners and normalizes responses to help you quickly identify malicious domains. All of this happens through a unified API and SDK - with no contracts or direct integrations to the provider required. For example, if DomainTools is chosen as the provider, a queried domain will return a standard score with an easy to interpret API response. This is then used by the action to accept or reject the user's request.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Domain Check

Use Pangea APIs to verify user is not from a suspicious domain

This action can be added to user login flows to verify that a user is not logging from an embargoed country. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

The Pangea Embargo service lets developers quickly check IPs and country codes against known sanction and trade embargo lists. Developers can use the Pangea-provided lists to determine where client activity is coming from and if any special action is needed. The Pangea lists are sourced from official government entities and are kept up to date with the latest changes.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Embargo Check

Use Pangea APIs to verify user is not from Embargoed Country

This action can be added to user login flows to verify that a user is not logging in from an ip that has been determined to be malicious. Once added to the flow, users will automatically be checked against the Pangea API and have their logins accepted or rejected accordingly.

Pangea provides intelligence data from industry leading partners and normalizes responses to help you quickly identify malicious ips. All of this happens through a unified API and SDK - with no contracts or direct integrations to the provider required. For example, if Crowdstrike is chosen as the provider, a queried ip will return a standard score with an easy to interpret API response. This is then used by the action to accept or reject the user's request.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea IP Check

Use Pangea APIs to verify user is not from a suspicious ip

Use Pangea APIs to verify user is not using a Proxy

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Is Proxy

Use Pangea APIs to verify user is not using a Proxy

This action can be added to user new user account creation flows to perform domain and embargo checks before allowing account creation. Once added to the flow, new users will be validated against Pangea APIs and have their logins accepted or rejected accordingly. It uses a variety of Pangea security APIs to validate and record new user registrations:

##Pangea Domain Intel## - This API detects users registering from malicious or risky domain names by retrieving intelligence about known domain names through a combination of providers. It contains intelligence on over 390 million domain names.
##Pangea Embargo Check## - This API resolves the registrant's IP address to its country and cross-references it with a list of embargoed or export restricted countries. This configurable API can be used to comply with ITAR export restrictions in the US, or other export restrictions in other parts of the world.
##Pangea Secure Audit Log## - Both positive and negative results are logged to the Pangea Secure Audit Log service, which provides immutable, and cryptographically verifiable tamperproof audit logging capabilities.

Configuration can be done on the Pangea console to view and manage audit logs (redaction and retention), manage embargo lists and select providers for domain scoring. As more services are added to the Pangea catalog, this integration will be updated to include additional validation steps.

**[Integrating Pangea Security Protocols into Your Auth0 Login Flow](https://youtu.be/0I3PVhmXXsA)** 
Michael Weinberger of Pangea walks through how to add Pangea security capabilities into Auth0 authentication flows using actions.

Pangea - Validate Registration

Use Pangea Security APIs to validate new user registrations

This Action allows you to configure the number of days a password is valid before it expires and the user must rotate it.


Password Rotation

# Verify users your way

Integrate your authentication experience with any of **Persona’s fully automated identity verification flows**. 

### Persona makes it easy to: 

1. Set granular controls over configurable verification checks that allow you to scalably approve or decline users based on device metadata, user-inputted data, and verification data
2. Convert good users faster by dynamically adjusting friction based on real-time risk signals 
3. Collect PII and incorporate any combination of verification building blocks (Government ID, Selfie, Watchlists, Age, Document, and more) into your experience

Trusted by both fast-growing startups and the most established companies in the industry, Persona’s platform allow companies to scalably tackle any identity challenge from automating onboarding decisions to fighting fraud.

### Get started for free and try the Persona platform with one of our most widely-trusted solutions: Government ID verification. 

Visit [Persona](https://app.withpersona.com/dashboard/register?utm_source=auth0&utm_medium=pbp&utm_audience=a&utm_campaign=acq_pmark_pbp_auth0-marketplace) to create a Sandbox account, and connect your Auth0 and your Persona instance to get started. 

Persona Verification

Verify users with end-to-end identity flows, like KYC or Gov ID and selfie

Plivo simplifies business communications by offering a simple, quick, and scalable way to modernize customer communications. Businesses of all sizes — from growing startups to public companies — rely on Plivo to deliver better customer experiences. Plivo's enterprise-grade communications platform includes a premium carrier network with connectivity in more than 190 countries, an API platform for messaging and voice calls, and solutions for sales and support teams. The Plivo team brings deep experience in communications and modern software to address the needs of today's businesses — quality, scale, innovation, and agility.

Using Plivo's Messaging platform and Auth0 you can send SMS messages to send multi-factor verification codes via text messages. This integration will add SMS-based MFA to the login flow for the tenant in which you're working.

Plivo

SMS-based authentication to enable stronger login

With the Prelude and Auth0 integration, you can deliver multi-factor verification via text messages (SMS and online messaging) to multiple countries, with a single interface. 
 
Prelude is a powerful and easy-to-use API that lets you send OTP codes worldwide using the most appropriate route and channel depending on your user’s context. Businesses typically see a 20-30% increase in conversion compared with their previous provider, while saving 30-40% monthly. Prelude also detects and prevents fraud including SMS pumping, using algorithms trained on tens of millions of data points.

Prelude

Powerful and easy-to-use API that lets you send OTP codes

This integration allows you to require users to verify their emails before signing in.  Auth0 sends verification emails to users automatically when they register.  Once they receive the email, they can click to link to set their email.  Additionally, you can leverage the Auth0 Management API to set a user's email verification status manually if you have verified their email outside of the default Auth0 workflow.

Require Email Verification

The Satosa integration for Auth0 lets you surface your digital agreements for your users upon login. Satosa makes it easy to import your agreement documents, customize your document branding, and manage the revisions that your users have acknowledged. 
 
Any revisions made to your service agreements will be automatically surfaced to any user who logins to your service through Auth0.

Satosa

Seamlessly enforce your service agreements and track user consent

This solution extends the Auth0 login flow with continuous access management and advanced authorization decisions based on human-readable policies. The solution consists of an Auth0 post-login action, the SGNL access service API, a graph directory, data ingestion adapters, and a human-readable policy for making authorization decisions. An Auth0 post-login action is configured to send authorization requests to the SGNL access service via the SGNL REST API as part of an Auth0 login flow. The SGNL access service responds to the post-login action with allow or deny decisions considering the context of the authorization request sent by Auth0. For example, context may consist of the principal making the request, the application being accessed, the client IP Address, the HTTP verb (e.g., POST, GET, PATCH), and the action (e.g., access, update, create, custom action, etc.). If the request is denied, the post-login action returns a denial to the Auth0 authorization server, which stops the OAuth 2 authorization request flow (will not return the authorization code) and redirects to the protected application with a customized error message. 

SGNL for Auth0

SGNL for Auth0 post-login authorization flows

Powered by industry-leading AI and a comprehensive global data network, Sift's solutions safeguard customer accounts against fraud. By integrating MFA directly with Auth0, Sift can bolster your login flows with real-time risk assessments to accurately detect and prevent account takeover attempts.
 

 
Sift's account takeover protection helps you maintain customer trust, reduce operational costs, and grow revenue - all while delivering frictionless experiences for legitimate users.

Sift ATO - Identity Defense

Stop account takeovers (ATO) with industry-leading AI-driven MFA

At Sinch, we give businesses the tools to boost their multi-factor authentication process with our versatile Verification API. Dive into our suite of phone number verification solutions, including SMS, Phone Call, Flash Call, and Data Verification — all crafted with a sharp focus on security and user experience. Quick, reliable, and reaching users globally, our verification options are wallet-friendly and enterprise-trusted for swift onboarding and fraud deterrence.
 

 
Embrace SMS Verification for a user-friendly system that grows with you. And stay tuned—we're excited to bring you more verification methods soon.

Sinch Verification

Global, secure, multi-method phone number verification

Protect your customers from unauthorised access with Two Factor Authentication (2FA) or a One Time Password (OTP) via Spryng. Provide secure, reliable and fast one-time passwords and log-in codes to your customers.

Spryng is the SMS Authentication Specialist in Europe with all the certifications such as ISO27001 and NEN7510. [More information and a free trial](https://www.spryng.nl/en/sms-authentication ).

Spryng

Spryng offers the most secure and safe login with SMS authentication

Tealium connects customer data - web, mobile, offline, Internet of Things (IoT) - so brands can connect with their customers. Tealium empowers companies to create a unified, real-time customer data infrastructure and makes customer data more valuable, actionable, and secure. Tealium AudienceStream CDP comes with patented visitor stitching technology that constructs highly accurate, comprehensive, and actionable customer profiles with the data from disparate systems. These audiences can be leveraged in any integrated system to help you deliver a consistent and relevant customer experience.

Tealium User Login

Tealium connects user data to our customer data platform

## Verosint – Attack Detection and Prevention

Verosint provides real-time account attack and threat intelligence to reveal cybercriminals hiding in user accounts and blocks attacks before they can cause harm. Verosint adds free account attack detection, notification, investigation and automated prevention for Okta including:

* Account attack and fraud dashboards
* Behavioral, threat and account analytics
* Device fingerprinting
* Credential intelligence
* Powerful OSINT signaling

...for protection against: 
* Account Takeover
* Credential stuffing attacks
* Account sharing
* Fake account creation
* and many other account-based attacks

![Verosint Threat Insights](https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png)


### Stop Advanced Account Attacks

Immediately detect account takeover, fake accounts, credential stuffing attacks, and more. Use AI to scan the account attack surface and focus quickly on attack insights to save you time and stay ahead of emerging risks.

### Deep Visibility Into Accounts

Gain deep visibility into user accounts and graphically see hidden relationships to reveal fake accounts, account sharing, and more. Expose suspicious user activity and discover prior attacks including compromised accounts already residing in your user base.

### Powerful Fraud Prevention

Stop fraud before it starts by blocking account attacks and compromise at their source. Includes account fraud dashboards and investigative tools for fraud discovery and case management.




Verosint Event Streaming

Stop account attacks with deep visibility and advanced notification and prevention.

Verosint provides real-time account attack and threat intelligence to reveal cybercriminals hiding in user accounts and blocks attacks before they can cause harm. Verosint adds free account attack detection, notification, investigation and automated prevention for Okta including:
 

 
* Account attack and fraud dashboards
 
* Behavioral, threat and account analytics
 
* Device fingerprinting
 
* Credential intelligence
 
* Powerful OSINT signaling
 

 
...for protection against: 
 

 
* Account Takeover
 
* Credential stuffing attacks
 
* Account sharing
 
* Fake account creation
 
* and many other account-based attacks
 

 
![Verosint Threat Insights]([<a href="https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png">https://cdn.prod.website-files.com/63f7d51ab746ab2cc23b27e6/6720f31abf28ee8d9fdb9454_verosint-threat-insights.png</a>])

Verosint Workflows

Verosint – Attack Detection and Prevention

Zenlogin is a security API that rests on top of your authentication flow. Whether that flow is custom, Auth0 or Okta, Zenlogin helps secure your user accounts by sending email notifications. These emails include maps and location data.

**How does it do this?**
When a user logs into their account, an API call is sent to Zenlogin. Zenlogin checks whether anything suspicious is going on (including checking the IP address logging in, the location of the login, the user agent, and whether the login is happening at a time that the user usually logs in.) If Zenlogin determines something suspicous, it will send an email to that user notifying them of the login (including a map of where the login happened). Zenlogin will *not* block the login; rather it provides this additional context to your user.

Zenlogin - Security Email Notifications

Notify users when a suspicious login happens on their account.

Easily add custom identity functionality to your application with Auth0 Actions.