ben-dechrai

A technologist with a staunch focus on security and privacy. I love helping developers find the joy of experimentation, and designing unconventional solutions for the purposes of learning something new.

Developer Advocate

Ben Dechrai

Extend your Auth0 identity workflows with Actions - powerful customisation capabilities with an improved developer experience.

We're excited to announce the **general availability of [Actions](https://auth0.com/docs/actions)**, which simplifies your custom workflows for **extending** Auth0 and offers an improved developer experience from Rules and Hooks!


<NonAmpContent>
<div class="embed-container" style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden; max-width: 100%;margin-bottom:40px;"><iframe style="position: absolute; top: 0; left: 0; width: 100%; height: 100%;" src='https://www.youtube.com/embed/UesFSY1klrI' frameborder='0' allowfullscreen></iframe></div>
</NonAmpContent>

<AmpContent>
  <amp-iframe width="480" height="270"
    sandbox="allow-scripts allow-same-origin"
    layout="responsive"
    frameborder="0"
    src="https://www.youtube.com/embed/UesFSY1klrI">
  </amp-iframe>
</AmpContent>

## What Is Actions?

One of the core capabilities that Auth0 brings you is the power of **serverless extensibility**.

You might have used [Rules](https://auth0.com/docs/rules/) already to execute custom code after your users log in, or [Hooks](https://auth0.com/docs/hooks) which offer similar functionality around certain other extensibility points. If you have, you'll be forgiven for trying to remember which area to use for what purposes, or wonder why the experience of each is so different.

This is where [Actions](https://auth0.com/docs/actions) comes in.

> Auth0 Actions provides a unified view across secure, tenant-specific, self-contained functions that allow you to customize the behavior of Auth0. Each action is bound to a specific triggering event on the Auth0 platform, which executes custom code when that event is produced at runtime.

## Rules and Hooks Got Us Here

Rules are a really powerful feature of Auth0 and are possibly one of the biggest reasons we stand out from the crowd. They allow you to run custom code after the user logs in and before your tenant hands them back to your application. Being able to augment claims in ID and Access Tokens, call external APIs, or control MFA processes, to name just a few examples, is a game-changer for many.

If you've used them extensively, we're sure you've experienced some limitations.

For starters, we keep a curated list of around 2,000 npm packages that you can use in your scripts. Keeping the list up-to-date and adding new packages is constant work for us and frustration for you.

And a newly saved rule is immediately active, affecting the next user to log in - there's no easy way to test it before this time.

Hooks was our first attempt to improve the experience. The main difference was an improved code editor, and the ability to search for npm packages available in the curated list. You also got access to a more integrated code testing interface with direct access to logs.

By focusing on events outside of the authentication workflow, Hooks added five extensibility points you could tap into:

- Client Credentials Exchange,
- Post Change Password,
- Post User Registration,
- Pre User Registration, and
- Send Phone Message

There are still a few disadvantages, though. Each hook can only have one active script, and you still have the issue of needing to make custom code live to test it.

And of course, now your custom code is split between two locations in the dashboard.

Further, neither Rules nor Hooks have version history. While this is easily solved by using the [Deploy Command-Line Interface (CLI) Tool](https://auth0.com/docs/deploy/deploy-cli-tool), we wanted to provide this ability directly in the dashboard.

## The Difference with Actions

Compare Rules and Hooks with the benefits of Actions, and it's clear this is a major evolution.

![Extensibility Feature Comparison](https://images.ctfassets.net/kbkgmx9upatd/2AtB5N5Y44fftQrQPkt1e6/79b0c00e3f96455ea96f3276fb2dc67e/extensibility-feature-comparison-v2.png)

Actions unites and improves on Rules and Hooks and you'll find everything you need in the two menu items under the Actions header in the dashboard navigation: Flows, and Custom Actions.

Flows is where you can configure the workflows, with the six events you had access to before now available through six triggers (and a potential for more to be added):

![Flows Screen](https://images.ctfassets.net/23aumh6u8s0i/6K2dRDVqbcmqiNMV98IpQO/8dcd45c02d9153924c1cc069529cfc8a/flows.png)

The Custom Actions section provides a common and consistent coding interface that provides all the functionality you need to create your custom functions.

> It's important to remember that Rules and Hooks are still available and will execute before their counterparts in Actions.

### A New Editor

There are many benefits you'll enjoy from Actions, not least being the usefulness of the code editor. We've added contextual assistance and inline docs, so you'll be prompted with suggestions as you type. Whereas you were previously much more reliant on the documentation for Rules and Hooks, you should find development time drops!

<img src="https://tinygif.com/images/2021/05/10/editor-writing.gif" alt="editor-writing.gif" border="0" />
<p align="center">Contextual assistance and inline docs in the new code editor</p>


And when you're ready to test your script, you can save it as a draft and test it right on that screen. You'll get feedback before you even deploy the functions: faster development and more confidence. You'll be nailing this in no time.

<img src="https://tinygif.com/images/2021/05/10/editor-testing.gif" alt="editor-testing.gif" border="0" />
<p align="center">In-editor testing interface</p>

### Consistent Function Signatures

> This is our third-generation extensibility platform, built from the ground up. We've developed a new programming model, which means the underlying objects, data, and APIs available to you in the custom actions are now consistent across each action type. We couldn’t have done this without all the feedback we've received from you since we moved Actions into Beta, so a massive thanks to you!

Each custom action you create will include boilerplate code with a function that gets called when executed. All of these functions will receive an `event` object as their first parameter: a read-only object containing all the inputs and context about this event.

The Post Login, Machine to Machine, and Pre User Registration triggers will also receive an `api` object containing all the outcomes that can take place. Think of this as an encapsulation of the side-effects you are able to perform by modifying the context object used in Rules and Hooks, refactored into documented function calls.

<table border="1">
  <tr bgcolor="lightgrey">
    <th>Capabilities in the <code>api</code> object</th>
    <th style="text-align:center">Post Login </th>
    <th style="text-align:center">Machine toMachine </th>
    <th style="text-align:center">Pre User Registration</th>
  </tr>
  <tr>
    <td>Deny User Access</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center">✅</td>
  </tr>
  <tr>
    <td>Add claims to Access and ID Tokens</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center"></td>
  </tr>
  <tr>
    <td>Set <code>user_metadata</code> and <code>app_metadata</code></td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center"></td>
    <td style="text-align:center">✅</td>
  </tr>
  <tr>
    <td>Conditionally enable multi-factor authentication</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center"></td>
    <td style="text-align:center"></td>
  </tr>
  <tr>
    <td>Redirect users</td>
    <td style="text-align:center">✅</td>
    <td style="text-align:center"></td>
    <td style="text-align:center"></td>
  </tr>
</table>
<p style="text-align:center;font-style:italic">Operations available in the <code>api</code> object are dependent on the event triggered</p>

You'll notice in the table above that the Post Login trigger can perform a redirect during the authentication flow. Previously, after a redirect to another website during the login flow, the user would be redirected back to your tenant and all the rules and hooks would execute again.

Instead, Actions streamlines the process of getting the user back into the workflow for this trigger by introducing an `onContinuePostLogin` function. When the user returns from a redirect, the Post Login auth flow picks up from where it left off, and you no longer need to ensure idempotency manually.

Here's what a Post Login Action looks like, compared to the single function of a Rule.

![The difference between the Rules and Actions editors](https://images.ctfassets.net/23aumh6u8s0i/2qYhTtK7IgTJqR28pamsOP/4b242867f1d24a5db216ea66b7392c59/rules-v-actions.png)

### Modules, Secrets, and Version Control

Just like Hooks, Actions allows you to define secrets that can be accessed from your custom code, but now you can include **over 1,000,000 npm packages** in your script. That's right, you can now specify any package and even the version from the npm index, so long as there are no native bindings or C modules that need to be built.

<img src="https://tinygif.com/images/2021/05/10/editor-modules.gif" alt="editor-modules.gif" border="0" />
<p align="center">Adding one of 1,000,000 npm modules to an action</p>

And last but not least, you now have version control, allowing you to revert to any previously deployed version of the custom script.

### Adding Deployed Actions to Flows

When you have your first deployed Action, you're going to have to add it to one of the Flows. Selecting "Login" from the Actions > Flow screen will show you the login flow, at which point you can drag your Actions from the right-hand pane into that flow. Arrange multiple Actions as desired, click the "Apply" button, and you're set!

<img src="https://tinygif.com/images/2021/05/10/flow-editor.gif" alt="flow-editor.gif" border="0" />
<p align="center">Adding an Action to a Flow is a simple as drag-and-drop</p>

### Debugging and Management

We've touched on testing before making custom code live, but once your Actions are in use, you'll be glad to know the tenant logs will now include Actions-related details where applicable. Any log entry that is associated with an Action will now include an "Action Details" area, which shows not only any generated output, you'll also get some itemized stats on how long it took to execute the Action.

Naturally, as with everything else in your tenant, the things you can do through the dashboard can also be done through the [Management API](https://auth0.com/docs/api), via the [Management API SDK Libraries](https://auth0.com/docs/libraries#mgmt), and the [Deploy Command-Line Interface (CLI) Tool](https://auth0.com/docs/deploy/deploy-cli-tool).

## What's Next?

We're so excited to get Auth0 Actions into everyone's hands - we'd love to hear what you think. Be sure to comment below with your thoughts or questions.

This is just the beginning of Auth0 Actions. There's so much more to come, and we can't wait to see where we can take it with your feedback!

<include src="asides/AboutAuth0" />

Auth0 Actions Is Now Generally Available

5e074956ee8ba1fea26e30d28c190495?s=300 avatar

5e074956ee8ba1fea26e30d28c190495?s=300

Full stack developer creating content at Auth0. I love taking a deep dive into hard-to-understand concepts and creating content that makes them easier to grasp. In my free time you can usually find me reading, hanging out with my dogs, or curling in the squat rack.

Former Developer Content Manager

Holly Guevara

Easily add integrations to your application with Auth0 Marketplace


We're excited to announce a brand new way to **find and integrate third-party solutions** into your Auth0 application &mdash; [**Auth0 Marketplace**](https://marketplace.auth0.com)!

<AmpContent>
<amp-youtube
    data-videoid="1rgeO_EbSGg"
    layout="responsive"
    width="480" height="270">
</amp-youtube>

</AmpContent>

<NonAmpContent>

<div class='embed-container' style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden; max-width: 100%;margin-bottom:40px;"><iframe style="position: absolute; top: 0; left: 0; width: 100%; height: 100%;" src='https://www.youtube.com/embed/8fwJwr1Y7hk' frameborder='0' allowfullscreen></iframe></div>

</NonAmpContent>

## What is Auth0 Marketplace

At Auth0, we never want to keep you stuck in a box. That's why we hold **extensibility** as one of our core product capabilities. While the endless options for integration are an excellent way to customize your own unique solution, it can sometimes be difficult and time-consuming to figure out *how* to implement them. 

You've looked through the documentation, waded through Google search results, and still can't figure out the best way to integrate a third-party solution. **We hear you**, so we've put in the work to create a straightforward solution to this problem.

**This is where the Auth0 Marketplace shines.**

With the new Marketplace, you can integrate a third-party service with these simple steps:

- Head to the [Auth0 Marketplace](https://marketplace.auth0.com).
- Search the name of the integration you need.
- Click "Add Integration" or follow the walkthrough under the Installation tab to integrate.

And that's it!

Auth0 Marketplace aims to **simplify your development process** with a straightforward way to add an integration to your application.

### Why use Auth0 Marketplace?

Auth0 Marketplace makes it easier and faster to extend and customize your Auth0 solution.

🤞 **Trusted** &mdash; All of the integrations you find in the Marketplace are pre-validated by Auth0, so you know you can trust them.

🔎 **Searchable** &mdash; Not only can you easily search for an integration you want, but the Marketplace also makes it easy to browse for integrations that you may not even know you need! Browse through our trusted catalog of partner and third-party integrations to see how you can take your Auth0 solution to the next level with just a couple clicks. 

👥 **Open** &mdash; We want the Marketplace to work for you. Do you have an integration in mind that's missing from the Marketplace? We'd love to hear from you! You can [**request an integration**](https://community.auth0.com/c/marketplace/request-integration/89) in our Community forum, or even submit your own! All submissions will be tested and vetted by Auth0 so that you can feel safe using the Marketplace.

## Using Auth0 Marketplace Integrations

Let's see the Marketplace in action by **integrating the GitHub social connection**. This will allow your users to sign in to your application using their GitHub account.

First, make sure you <a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">**sign up for a free Auth0 account**</a> if you don't already have one.

Next, head over to the [Auth0 Marketplace](https://marketplace.auth0.com/) homepage. Here, you have the option to **browse** through the categories on the left to discover ways to extend your solution or just **search** for the integration you already know you want.

Let's search for "**GitHub**". 

![Auth0 Marketplace GitHub integrations](https://images.ctfassets.net/23aumh6u8s0i/351v5uHzNPkeE47679aBDa/6e923d270a47d62861334b463133d0ac/github-auth0-integration-search)

This gives you three options:

- GitHub Social Connection
- GitHub Enterprise Cloud SSO Integration
- GitHub Enterprise Server SSO Integration

Select the first option, **GitHub Social Connection**.

![Auth0 Marketplace GitHub social connection](https://images.ctfassets.net/23aumh6u8s0i/4V8Vp2nVjoVUHi8WA0K8dT/626e808cacc64c9e22ee0382d2a65700/auth0-marketplace-github-login)

This will bring you to the GitHub integration page, which contains the following information: 

- Description of the third-party integration
- Link to the third-party integration website and the privacy policy
- Link to the [support page](https://support.auth0.com/) for the GitHub integration
- Installation tab where you'll find instructions to add the integration
- An "Add Integration" button, which will take you to the Auth0 dashboard to install the integration

> ❗ Note: Every integration has its own support link. For partner integrations, you'll be taken to the partner website to receive the best support.

Click on the **Installation** tab, and you'll see a list of step-by-step instructions to integrate the GitHub login option into your application.

![Auth0 Marketplace GitHub social connection installation steps](https://images.ctfassets.net/23aumh6u8s0i/7r7vtrz8OmeglSi7LPyQY8/34ef5a8b0020221fdc25bc428b727c16/auth0-marketplace-github-installation)

This integration requires you to first set up a GitHub application. The integration instructions tell you exactly how to do this, so just refer to the steps there while setting it up.

For the Auth0 side of the setup, go back to the [Auth0 Marketplace GitHub integration page](https://marketplace.auth0.com/integrations/github-social-connection) and click on the "Add Integration" button. This will take you directly to the GitHub integration configuration page in the Auth0 dashboard. Continue to follow the steps listed on the GitHub Marketplace Integration page to activate the integration. 

Once you've finished configuring your GitHub options, click **Create**. 

You'll be directed to your Auth0 Applications list. To test that it works, select the **Default App** and click on **Try Connection** in the top right corner.

You'll be asked to authorize the Auth0 application to access the selected permissions, and if the connection works correctly, you'll see an "It Works!" page with the user profile information.

![Auth0 GitHub social connection authorization](https://images.ctfassets.net/23aumh6u8s0i/7oJ0wYLy9ro7Vajap1gpx5/88e9e7da76e4fcbd3e96c934d6e47e45/github-auth0-authorization)

![Auth0 GitHub social connection authorization](https://images.ctfassets.net/23aumh6u8s0i/7oCyzeToF0nd2pgQFIsL2Q/0ed02467307759262e91acb05c0c6daf/github-auth0-authorization-success)

And that's all! With Auth0 Marketplace, you were able to:

- Quickly find the integration you want
- Get help using the link on each integration page
- Follow step-by-step instructions to implement the integration

Go ahead and [test out some more integrations](https://marketplace.auth0.com) on your own and let us know what you think in the comments below!

<div class="webinar-card" style="background:#f4f4f4;padding:35px;margin-bottom:40px;">
    <h3 class="text-center">Upcoming Webinar: Auth0 Marketplace</h3>
    <p>Join us on <strong>October 7th, 2020 at 8 am PT or 4 pm PT</strong> for a live panel discussion where we introduce Auth0 Marketplace and discover how it can help you:</p>
    <ul>
        <li>Discover new identity solutions</li>
        <li>Extend Auth0 with trust</li>
        <li>Reduce the time needed to implement identity</li>
    </ul>
    <br>
    <div class="text-center">
        <a class="btn btn-success" style="width:80%;margin-bottom:5px;" href="https://auth0.com/resources/upcoming-webinars/auth0-marketplace-webinar?utm_source=auth0_blog&amp;utm_medium=intro_marketplace&amp;utm_campaign=marketplace_webinar"> 
            Register for 10/7 at 8 am PT</a>
        <a class="btn btn-success" style="width:80%" href="https://auth0.com/resources/upcoming-webinars/auth0-marketplace-webinar-session-2?utm_source=auth0_blog&amp;utm_medium=intro_marketplace&amp;utm_campaign=marketplace_webinar"> 
        Register for 10/7 at 4 pm PT</a>
    </div>
</div>

## Partner Spotlight

We want to give a huge shoutout to our Auth0 Marketplace partners! You can easily add any of these partner integrations to your application by visiting each of their linked integration pages.

### OneTrust

[OneTrust](https://www.onetrust.com/) is a growing leader in privacy management and compliance. 

With the [OneTrust Auth0 integration](https://marketplace.auth0.com/integrations/onetrust-consent-management), you can easily add consent data to user profiles, automate compliance and privacy regulations, and give your users the power to control their own privacy preferences.

### Onfido

[Onfido](https://onfido.com/) is a leader in digital identity verification. With the Onfido integration, you can require your users to identify themselves during authentication, onboarding, or while performing any other high-risk actions. Onfido's robust technology can verify your users' real identities using a photo ID and facial biometrics.

Add Onfido to your application today by following the instructions on [Onfido's Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/onfido-identity-verification).

### ID DataWeb

[ID DataWeb](https://www.iddataweb.com/) is an identity verification and fraud detection service boasting over 70 verification options. 

Using the [ID DataWeb Auth0 integration](https://marketplace.auth0.com/integrations/iddataweb-identity-verification), you can take advantage of ID DataWeb's verification workflows, robust management and reporting dashboard, and more.

### Scaled Access

[Scaled Access](https://www.scaledaccess.com/) is a cloud-based authorization platform that allows you and your users to manage access to protected content, data, or tools. 

Some of Scaled Access's extensive authorization offerings include relationship-based access control, fine-grained authorization, and more. You can integrate these advanced authorization offerings into your own application by visiting the [Scaled Access Marketplace integration page](https://marketplace.auth0.com/integrations/scaled-access). 

### Perch

[Perch Security](https://perchsecurity.com/) is a flexible 24/7 threat detection and response platform. By adding Perch to your application, you'll be alerted of threat activity on your network, receive extensive reporting based on Auth0 log data, and more.

Try out Perch today by following the installation steps on the [Perch Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/perch-security-log-streaming).

### Vouched

[Vouched](https://www.vouched.id/) boasts secure, real-time identity verification and end-to-end fraud detection so that you can verify your new users instantly. You can easily and accurately verify the identity of your users with the proprietary machine learning algorithms developed by Vouched. Facial recognition, liveliness determination, data extraction, IP address inspection, and more come together to power the Vouched validation process.

Visit the [Vouched Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/vouched-id-verification) to add Vouched to your application today.

### MyLife Digital

[MyLife Digital](https://mylifedigital.co.uk/consent-preference-management-for-ciam/) is a leading universal consent and preference management platform. With MyLife Digital, you can increase user opt-ins, boost user engagement, and be sure you're up to date with compliance.

Using the [MyLife Digital Auth0 Marketplace integration](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent), you can add MyLife Digital to your application's login flow to include consent options for new and existing users.

### Criipto

[Criipto](https://criipto.com/) offers a simple way to set up and add e-ID services of the EU to your application. With Criipto, you'll have immediate access to Norwegian BankID, Dutch DigiD, Danish NemID, and many more. Once integrated, you'll be ready to accept e-ID logins within hours.

Get started with Criipto today by visiting the [Criipto Verify integration page](https://marketplace.auth0.com/integrations/criipto-verify-e-id) in Auth0 Marketplace today!

### Caisson

[Caisson](https://www.caisson.com/) makes it easy to know exactly who your users are by adding ID checks to your application. With Caisson, your users are validated during registration or login with the Caisson ID Check. Caisson will extract information from your users' photo ID (drivers license, passports, etc) and validate using their state of the art facial comparison algorithms.

You can add Caisson to your application now by visiting the [Caisson Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/caisson-id-check).

### Pulumi

With the [Pulumi](https://www.pulumi.com/) infrastructure as code SDK, you can create, deploy, and manage infrastructure on any cloud using all of your favorite programming languages.

The Auth0 Pulumi integration makes it easy to manage and deploy Auth0, enforce security, and automate everything from setup to testing to delivery. Get started with Pulumi by visiting the [Pulumi integration page](https://marketplace.auth0.com/integrations/pulumi) in Auth0 Marketplace.

### KaKao Login

Kakao Login is South Korea's largest mobile messaging app operator. It includes mobile messaging (Kakao Talk), gaming (Kakao Games), music (Melon), e-mail (Daum Mail), search (Daum Search), news (Daum News), and more.

Let users login using their KaKao account by visiting the [KaKao Login integration page](https://marketplace.auth0.com/integrations/kakao-login) on Auth0 Marketplace.

## What's Next?

We're so excited to get Auth0 Marketplace into your hands! We'd love to hear what you think about the Marketplace. Be sure to comment below with your thoughts or questions and **let us know any future integrations you'd like to see**.

This is just the beginning of Auth0 Marketplace, and we can't wait to see where we can take it with your feedback!

<include src="asides/AboutAuth0" />


Introducing Auth0 Marketplace

shafiq-shivji

Shafiq leads Product Marketing for Auth0's Ecosystem and Extensibility domains. He brings vast experience from previous roles as a Product Manager and Sales Engineer working in adjacent SaaS industries like machine learning, web/mobile apps, and communications. He especially enjoys the creative process of conceiving and taking high-impact products to market.

Product Marketing Manager

Shafiq Shivji

What consent management is and why it matters



## What Consent Management Is and Why It Matters

The identity landscape has never been more complicated, with emerging security threats, new privacy regulations, and high expectations for a user experience that’s both seamless and secure. [Identity and access management (IAM)](https://auth0.com/blog/what-is-iam/) solutions allow companies to secure their technology perimeters, streamline UX, get deeper insights into customer behavior, and power commerce and conversion.

[Consent management](https://auth0.com/resources/whitepapers/consent-management) &mdash; a process that guides compliance by informing users about data collection and usage practices &mdash; is tightly coupled with IAM. Consent management logs and tracks consent collection to guide compliance with privacy regulations like the [GDPR and CCPA](https://auth0.com/resources/whitepapers/GDPR-vs-CCPA).

As of 2020, [66% of countries are covered by data privacy regulations](https://unctad.org/en/Pages/DTL/STI_and_ICTs/ICT4D-Legislation/eCom-Global-Legislation.aspx), and the percentage is growing. Understandably, consent management is top-of-mind for plenty of companies, but it’s not a challenge you have to face alone. 

<include src="ebook-ads/ConsentManagement" />

### Consent management platforms

Consent management platforms (CMP) allow brands to automate the consent management process, making GDPR compliance seamless and allowing companies to focus on their core competencies rather than devoting time and resources to consent collection and management.

Read on to understand the value of consent management platforms and how the ecosystem of solutions on [Auth0 Marketplace](https://marketplace.auth0.com/) can help you manage consent securely and with minimal friction.

## The ROI of Consent Management

The ROI of consent management lies in its ability to take the time-consuming, resource-intensive process of consent collection off your developers’ plate, so they can focus on supporting your core business functions. The right consent management platform allows companies to:

* Guide compliance with privacy regulations like the [GDPR and CCPA](https://auth0.com/resources/whitepapers/GDPR-vs-CCPA), avoiding expensive penalties and damage to brand reputation.
* Bolster their security posture without compromising their ability to deliver a seamless customer experience.
* Save developer time and increase focus on core competencies instead of supporting homegrown identity solutions.
* Gain deeper, more specific insights into customers’ habits and needs.

## Make Consent Management a Competitive Advantage

While pressure to comply with consent requirements has inspired consternation at some companies, other organizations view their ability to protect customer data as a competitive advantage. The fact is, being transparent about how you collect, store, and leverage first-party data builds trust with consumers.

The right approach to consent management can also stimulate innovation by allowing your developers to focus on what they do best, rather than devoting time and effort to propping up a legacy solution that’s non-compliant anyway. Furthermore, consent management allows you to draw on deeper insights into your customers’ behavior and buying priorities, which helps you make better decisions and deliver more value to your customers.

Let’s look more closely at the business value of managing consent.

### Power Digital Transformation

The right consent management system enables digital transformation initiatives at scale without compromising privacy and security. In order to leverage customer data — often considered a company’s most valuable asset — in furtherance of digital transformation efforts, it’s essential to cement consumer trust in your data protection practices. A digital transformation strategy that doesn’t include IAM and consent management is less likely to succeed. 

Consent management is a way for companies to demonstrate their compliance with privacy regulations and consent requirements, so consumers know they can trust you to collect, store, and use their data properly. Here’s another way to think about it: Consent management connects business needs with consumer concerns and builds a trusting digital relationship between the two.

### Protect against data breaches

You already know that adopting the right security measures throughout your infrastructure can help you avoid data breaches. What you may not realize is that implementing consent management to prevent identity and access management (IAM) permission errors is an important step in protecting against breaches. 

In [a recent IDC survey](https://www.securitymagazine.com/articles/92533-nearly-80-of-companies-experienced-a-cloud-data-breach-in-past-18-months) of 300 CISOs, 61% percent said that identity and access management (IAM) permission errors were a top concern. The same study found that 80% of companies had experienced at least one cloud data breach in the last 18 months. Almost half (43%) reported experiencing ten or more breaches. Solid consent management practices can help you avoid the kinds of IAM permission errors that open the door to a data breach.

### Guide compliance and build trust

The GDPR, CCPA, and other privacy regulations require companies to apply new levels of scrutiny to their privacy and security practices. [According to Gartner](https://www.gartner.com/en/newsroom/press-releases/2018-08-15-gartner-forecasts-worldwide-information-security-spending-to-exceed-124-billion-in-2019), these regulations drove at least 10% of market demand for security services, including identity and access management (IAM), in 2019. A modern understanding of data protection that foregrounds the importance of consent management allows companies to achieve compliance while building trust in their brands.

Compliance is critical not only because no one wants to suffer a data breach or be slapped with a fine, but also because consumers show a marked preference for brands they feel will safeguard their data. [A majority of UK consumers](https://trustarc.com/blog/2019/05/29/new-trustarc-research-reports-on-consumer-privacy-attitudes-one-year-into-gdpr-enforcement-era/) (57%) report being more likely to do business with a company that demonstrates its GDPR compliance with a seal or badge. One in three people (34%) report trusting companies to store and leverage customer data, up from just one in five in 2017. Being transparent about what information you collect and how you store it augments user trust while helping you comply with privacy regulations.

### Centralize consent data to drive better insights

Multiple stakeholders in your organization, including marketing, data governance, risk, and CRM, rely on customer data to meet their goals. Legal and compliance teams certainly need access to consent collection data to do their jobs. Only rarely, however, do these teams have a centralized database to draw from. Most organizations collect and store data in silos, with duplicate records that cannot be merged across multiple databases.

Here are some of the challenges associated with not centralizing consent data:

* Consent records are stored across multiple, duplicate records containing conflicting data.
* There’s no common taxonomy between records, so reading them requires manual intervention.
* Linking customer consent and preferences to external systems like CRM without the benefits of a centralized consent database is complex, time-consuming, and fraught with error.

Centralizing customer data with a consent management platform allows everyone who needs to access up-to-date consent data to do so. Taking consent data out of silos and centralizing it on one platform makes your company more compliant and efficient.

## Manage Consent With Auth0 Marketplace

No one company offers a consent management solution so comprehensive that it meets every conceivable business need and makes every other solution redundant. That’s why [extensibility](https://auth0.com/resources/whitepapers/tao-of-extensibility) is so critical. Extensibility describes a system’s capacity to support future growth. It refers to the ability to extend a system to support new functionalities and use cases, as well as the level of effort required to implement those extensions. An inherently extensible platform like Auth0 empowers users to tailor identity flows with custom code and integrate with third-party solutions to meet enterprise needs.

To some extent, the SaaS model is predicated on the assumption that it’s better to utilize the services of a dedicated expert in a particular arena than to build from scratch a solution to a problem that’s already been solved. In keeping with this approach, Auth0 Marketplace allows developers to leverage third-party [consent management](https://marketplace.auth0.com/categories/consent-management) integrations to solve their nuanced, evolving identity challenges.

The Auth0 platform has robust, GDPR-compliant consent management solutions. Opening up our platform to third-party, partner-built integrations accelerates innovation for Auth0, our customers, and our partners. This ecosystem also gives our customers the tools they need to build a consent framework that solves the range of use cases they encounter. Developers get more integrations to support more use cases, and vendors have more opportunities to capture business and deliver value. For vendors who haven’t yet built integrations with Auth0, Marketplace gives them that opportunity.

## Meet the Consent Management Experts

Auth0’s marketplace of third-party integrations allows developers to build identity solutions with an improved discovery and installation experience. The partnerships we’ve formed can help our customers solve their consent management challenges. Here are our [launch partners](https://marketplace.auth0.com/categories/consent-management) whose integrations help customers meet their consent requirements by obtaining and maintaining consent collection records.

### OneTrust

[OneTrust](https://marketplace.auth0.com/integrations/onetrust-consent-management) is a leading platform for operationalizing privacy, security, and governance. More than 6,000 customers of all sizes, including Aetna, Oracle, and Akamai, rely on OneTrust to guide compliance with the CCPA, GDPR, LGPD, PDPA, ISO27001, and other privacy and security laws around the world.

### MyLife Digital

[MyLife Digital](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent) develops solutions to consolidate and centralize customer data, giving you a single source of truth to help you build authentic, value-driven relationships through personalized communications that drive opt-ins, increase engagement, and guide compliance with data privacy regulations.

## Meeting Tomorrow’s Identity Needs

Auth0 Marketplace will solve the identity needs of today and tomorrow. The fact that we’re recruiting best-in-class partners to innovate on our platform signals that Auth0 will be capable of meeting your needs today and your needs in the future — needs yet to be identified.

To learn how to integrate with our consent management partners, [start with this blog post](https://auth0.com/blog/consent-management-with-auth0-marketplace/).

<include src="asides/AboutAuth0" />


"auth0-integrations"