Auth0 Platform from Okta, which is for access management and single sign-on, is basically for dividing modern IM into categories. The first is workforce identity, meaning SSO and access management solutions for users, partners, and temporary employees, which is catered by a traditional Okta Platform. Customer identity speaks about internet application customers, such as logging into an FMCG application through mobile or laptop applications like Flipkart, Amazon, and Alibaba.com. If security is needed for these applications, it is called customer identity and access management solution, CIAM, and requires a different tool because the user base will be in millions or billions. For instance, banking apps and airline applications fall under CIAM solutions, and Auth0 Platform will be implemented for these requirements.

Most integrations will not be done by traditional connectors but by exchanging metadata between the application and Auth0 Platform. Once metadata is exchanged, certificate information and cryptographic keys are also exchanged, making transactions secure. Different methodologies for onboarding users are available, including bulk onboarding and risk score features. If someone logs into a banking app normally from the UK, but they log in from Namibia after stealing a mobile phone, the application detects this change of location as a zero trust model. Policies such as restricting app access based on location can also be implemented using Auth0 Platform, along with self-service user registration features similar to opening a bank account.

Universal login, while I do not think it has a major impact, allows a seamless experience by authenticating multiple app logins from one entry point, which would be particularly useful in healthcare applications.

Auth0 Platform is quite affordable compared to IBM Security Access Verify, which is on the higher end. ForgeRock and Okta are in the same bucket for pricing.

View full review »

The best features of Auth0 Platform are that it is easy to integrate and is cross-platform. We use it with the Angular front end and the UWP application, and it also works with the iOS application, so it is really easy to integrate within the dashboard without any complications.

Regarding the flexibility of customizable authentication, we do not have a specific need because we only authenticate, and the endpoint sends the verification, which is really easy. We have even tried SAML connection because another client suggested that there should be more clients with SAML connection.

View full review »

The ability to manage multiple customers and assign roles within Auth0 Platform is the most valuable feature I have found. It allows certain users access only to specific pages or data sets in our application. We can have all our customers in different buckets. I also maintain separate production and staging environments with distinct setups, making it central for authentication management across different environments and customers.

The flexibility of Auth0 Platform's customizable authentication flows in adapting to our organization's specific needs is commendable. Being able to execute custom code snippets within Auth0 Platform to set different access levels or provide messages to users who lack access to requested pages, along with tracking and notifications, is very beneficial.

The impact of Auth0 Platform's centralized, customizable universal login on our organization's user experience is significant, as it is essential for hosting our application effectively.

View full review »

The best features Auth0 offers are its scalability and it is a better way of authenticating a user compared to just a tokenized version of authentication where the token is static and does not offer dynamic authentication compared to how Auth0 offers it.

While working in a dynamic environment where there are many enterprises involved in the service, you need a tool that can authenticate them on the go, which is why I like it.

Auth0 has positively impacted my organization. Previously we used the tokenized version of authentication. The work was simple, but when you push this code to deployment and enterprises are involved, it makes much more sense to authenticate them through Auth0 so that you can just get a login for yourself when you are authenticated, which helps to dynamically scale depending on the product and its viability.

The specific outcomes since I started using Auth0 include time-saving, more security, and scalability, which are the three things I would emphasize.

View full review »

The most valuable feature of Auth0 is its customizability. It allows customers to go beyond what's out of the box and customize their experience to meet their needs. Auth0's multi-factor authentication is effective. Passkeys and threat protection are also excellent features. View full review »

The most important feature for me was the ease of use, as it needed to be easy to integrate into my platform. Additionally, the usual features such as social media integration are beneficial.

View full review »

Auth0’s multifactor authentication enhances our security posture.  They are GDPR compliant, and they provide us with a way to host in multiple regions. We use a European region to be GDPR compliant. 

For performance, we can also choose different regions, like China or North America. They are also HIPAA compliant, but we don’t deal with HIPAA. They are ISO certified, so it’s easy for us to convince our security team. They manage key rotation and things like that on their end in the backend, which helps us.

View full review »

Auth0, being deployed on the cloud, provides all the functionality in a single place. We don't need to maintain machines, inventory, or procurement. It has a lot of customization and out-of-the-box features as well. We can quickly plug it into products like Active Directory or other identity broker solutions.

View full review »

It offers stronger security and flexibility with API keys, which are generated on runtime. This is valuable as they are reusable and can be used for confidential applications.

View full review »

The solution offers simplicity of use. They have too much enterprise onboarding when you want a B2B login. The first quick start is the easiest thing. You have too many tutorials and YouTube guides to help you integrate it with your code.

View full review »

The most important thing for me is compliance. Everything that they have developed in Auth0 is already certified by many regulators such as ISO. So, we do not need to take care of that. We have the shared responsibility model to share assets with other products we are using in the cloud.

I am very pleased with the number of features that came with Auth0. I am also very happy with how Auth0 developed since we have been using it. The number of features is really great for me, and it really covers almost all of the needs that we have when deploying it into our product.

Their documentation and SDKs are great when it comes to helping developers and application builders set up authentication. On a scale of zero to 10, I would rate it a strong eight because their documentation is really good. They are able to explain a pretty complex process of authentication and authorization in simple words. Their documentation is a really great resource of knowledge, even if you are not using Auth0. That's because the process that they have implemented is a well-known standard in the industry, and they have described it really well. Their documentation is really great for us. We had no problems with SDKs, and their SDKs are also pretty good.

View full review »

It's a very powerful platform. It has the ability to do the usual stuff, according to modern protocols, like OIDC and OAuth 2. But the real benefit of using the platform comes from its flexibility to enhance it with rules and, now, with what they call authentication pipelines. That is the most significant feature, as it allows you to customize everything regarding the authentication and authorization process. I would rate its flexibility between a nine and 10, out of 10.

For example, one way to authenticate into our system is to log in with Google. Our service is not one that you can simply sign up for through the internet and then start using. You need to talk with one of our technical account managers, sign a contract, and then we start everything for you. So when a user logs in with Google, it means that every user on the internet can log in to the system. We needed to find a way to know if a user was already defined in our systems, and otherwise, to reject him. We wrote a simple Auth0 Rule to get the user's email from Auth0 after he authenticated, and we then use an API in our backend system to check if the user is legitimate. In this way, we filter out all those who are not our paying customers.

In addition, we like the integrations that are built into Auth0. For example, it has a built-in integration with Zendesk. It's very easy to set up new SAML and SSO integrations with our customers, as it supports all IDPs out there, like Okta and Azure, among others. 

Auth0 also has a very rich selection of social connectors that allow users to connect with their social accounts. We mostly use Google, but they support many others. In addition, their user interface is very intuitive.

Lately, it looks like they have been very responsive to customer needs since they brought out the Organizations feature in the last year, which is a very nice feature that helps customers like us to manage our customers. It's targeted at enterprise-scale solutions, allowing us to manage multiple organizations within the same tenant. We are seriously considering migrating to this feature. It's a process, but we feel that it will better support the customer model that we have in Kenshoo. We also need to be able to support customized login screens with different company logos. All of that is supported by Auth0, so this probably would be a much more important feature for us than the rules themselves.

View full review »

Currently, we're just using the login and sign-up features. The most valuable feature is interface application integration, but we haven't fully used it yet. We'll need it in the future for a few potential clients.

View full review »

The most valuable feature is that it is simple to integrate, irrespective of your codebase.

View full review »

The most valuable feature of the product is scalability. 

View full review »

The valuable features are that it is extremely secure and that it's developer-friendly.

View full review »

The most valuable feature would have to be authentication using OpenID Connect.

View full review »

I implemented the use of authentication workflow entirely on the client side (S.P.A./Single Page Application). This gives the client app a JWT and makes the infrastructure a lot easier to manage in a distributed way since I don't need to track user sessions on the servers anymore. Now, I simply use the JWT from the client on the server side to process requests and push updated profile data to a database/queue as needed and end the process without having to persist data in the web server (sessions).

View full review »

Social media integration: Auth0 supports over 30 social logins with support for the major ones such as Facebook, Twitter and Google. Besides the 30 or so out-of-the-box providers, Auth0 also allows custom social connections through their extensions framework. This to me provides a great amount of flexibility to solution architects.

Ready-to-use modern APIs using JSON/RESTfull

LDAP integration

View full review »