Auth0
by Okta • • Customer Identity & Access Management (CIAM)
Auth0 is customer identity and access management for developers building customer-facing apps, owned by Okta since 2021.
Auth0 is customer identity and access management (CIAM) software for developers building customer-facing web, mobile and API applications. It handles sign-up, login and the user database, so a team does not build authentication itself. Okta owns Auth0, and the acquisition completed on 2021-05-03. The Auth0 name, the auth0.com site and a separate pricing page all continue under Okta. Universal Login is the hosted login and signup page, which can be customized with partials and served from a custom domain. Social login covers providers such as Google, and passwordless sign-in covers passkeys and one-time codes. Multi-factor authentication comes as Pro MFA and Enterprise MFA. Actions run custom code during signup, login and token issuance, and Organizations model each business customer with its own members. Enterprise Connections and Self-Service SSO let a customer admin set up a SAML or OIDC connection without Dashboard access, and progressive profiling gathers extra profile data on later logins. Auth0 fits developers and product teams adding login to a new customer-facing app, and B2B SaaS companies that give each business customer its own single sign-on connection. It also suits teams moving users off a legacy store, since bulk import and gradual migration on login are built in, and the B2C Professional plan can use an existing user database for logins. Employee sign-in belongs to Okta's separate workforce identity product. Auth0 is bought by plan (Free, Essentials, Professional and Enterprise) in a B2C or a B2B version under one login, scaled by monthly active users, so the tier a team lands on follows its user count. Teams use Auth0 for customer login and signup, enterprise SSO for B2B customers, passwordless sign-in and user migration. Account linking merges a social login and an email account into one customer identity. Log streaming sends audit logs to Datadog, Splunk, AWS and Azure, and event streams deliver identity events by webhook, AWS EventBridge or an Action. Machine-to-machine tokens, issued through the client credentials flow, cover service-to-service calls to an API. Bulk user import loads a JSON file of users into a database connection, which suits a move from an older login system.
Features
- Included: Hosted login and signup pages
- Included: Social login with major identity providers
- Included: Enterprise SSO connections for B2B customers
- Included: Self-service SSO setup by customer admins
- Included: Organizations and multi-tenancy
- Included: Passwordless and passkey sign-in for customers
- Included: Optional MFA for customer accounts
- Included: Progressive profiling and custom attributes
- Not included: Consent and terms acceptance tracking
- Included: Account linking across login methods
- Included: Breached password and bot attack protection
- Included: Custom domain on the hosted login
- Included: Extensible login flows with custom code
- Not included: Roles and fine-grained authorization
- Included: Machine-to-machine token issuance
- Included: Event streams on customer identity events
- Included: Bulk user import and migration
- Included: Free tier by monthly active users
Additional Features
- Universal Login hosted pages
- Login page customization with partials
- Custom domain for the login page
- Social connections such as Google
- Passwordless authentication
- Passkeys
- Pro Multi-Factor Authentication
- Enterprise Multi-Factor Authentication
Best for
- developers adding login and signup to a customer-facing web or mobile app
- B2B SaaS companies giving each business customer its own SSO connection on the B2B plans
- product teams that want a hosted login page on their own domain
- teams migrating users from a legacy login system
- startups building on the Free plan before paying
- platform teams sending identity logs to Datadog or Splunk
- teams offering passkey or passwordless sign-in
- companies that need a 99.99% SLA on the Enterprise plan
Use cases
- adding social login to a consumer app
- letting business customers connect their own identity provider
- customizing login screens with HTML and JavaScript partials
- importing users from a JSON file into a database connection
- migrating users gradually as they log in
- linking a customer's social login and email account
- issuing access tokens for service-to-service API calls
- sending login events to a SIEM or data warehouse
- collecting extra profile data over later logins
- running custom checks during login with an Action
Screenshots & Videos
Explore Auth0 in action