Samuel Frank

Sam Frank is Auth0's Sr. Product Manager for new initiatives. He works within the Auth0 Lab to commercialize the team's new ideas so they're available for builders everywhere. As a former platform product manager and startup product lead, he knows the challenges that developers face when creating new apps and he leverages those experiences to focus our teams efforts delivering the next generation of identity tools.

Senior Product Manager

Connect with 350 thousand Unstoppable users and bring Web3 universal usernames into your application

We're excited to announce the latest addition to our [Web3 marketplace category](https://marketplace.auth0.com/categories/web3): [Unstoppable Domain's](https://unstoppabledomains.com/) new [Social Connection](https://marketplace.auth0.com/integrations/unstoppable-domains) in the [Auth0 Marketplace](https://auth0.com/marketplace). You can now add Login with Unstoppable to your login box and let users use their Unstoppable NFT domains as an authentication method.

## Unstoppable Domains

A backbone of Web3 technology is the [public/private keypairs](https://auth0.com/blog/how-to-explain-public-key-cryptography-digital-signatures-to-anyone/). The public key acts as a blockchain 'address' that can be used on-chain to assign tokens and other resources. Users hold their private keys to verify ownership of the address. 

One of the usability challenges Web3 users face is interacting with these very long public addresses. If they make one typo when sending a cryptocurrency payment, it can lead to '[burned coins](https://www.coindesk.com/learn/what-does-it-mean-to-burn-crypto/)' – a mistake I made when I first started using Web3 tech.

Similar to how domain names made IP addresses human-readable in the 1980s, Unstoppable Domains is looking to make blockchain addresses more human-readable and easier to transact with through the use of Unstoppable NFT domains. 

These domains let users create a universal username, like myname.crypto, to use with any application. Instead of typing their wallet address into Web3 dApps, like cryptocurrency payment apps, they can instead use their NFT domain, provided the dApp developer implements [Unstoppable Domain's libraries](https://docs.unstoppabledomains.com/developer-toolkit/resolution-integration-methods/resolution-libraries/libraries-overview/) or [uses their API](https://docs.unstoppabledomains.com/developer-toolkit/resolution-integration-methods/resolution-service/overview/). 

Additionally, users can build out their digital identity attached to their NFT domains, bringing the Web3 vision of user privacy and data ownership to life.

## Web3 Signal Sign-On

Unstoppable is competing in the new Web3 wallet signal sign-on sector with over 150 dApp integrations and counting. They are an alternative [Identity Provider (IdP)](https://auth0.com/docs/authenticate/identity-providers) to Facebook, Twitter, or Google, etc. Instead of relying on these Web2 alternatives, users can use their wallet, facilitated by Unstoppable infrastructure, to sign in to applications.

![Web3 Signal Sign-On](https://images.ctfassets.net/23aumh6u8s0i/QnwtlykYKcnkdAySSzzH6/b43ce1324134ca5810ee537a05ecbafd/01_marketplace.png)

Unstoppable lets users enrich the profile associated with each domain with other data usually found in user profiles like social media accounts, personal data, other blockchain addresses the user owns, and more. Some of this data is accessible to anyone via the [Polygon Blockchain](https://polygon.technology/), while other data is stored off-chain and retrieved only when the user signs in with Unstoppable. 

Having profiles stored in Unstoppable available when signing in with Unstoppable Domains lowers the friction to create rich profiles in applications that use the Unstoppable ecosystem.

## How It Works

The Unstoppable team has done a lot of work making this process easy for developers. At a high level, it's two easy steps:

1. Create an Unstoppable client account. This video walks you through the process. You can also: [https://www.loom.com/share/f1655c8e94cc464188472eea80d0f921](https://www.loom.com/share/f1655c8e94cc464188472eea80d0f921); learn about its client configuration options here: [https://docs.unstoppabledomains.com/login-with-unstoppable/login-integration-guides/login-client-configuration/](https://docs.unstoppabledomains.com/login-with-unstoppable/login-integration-guides/login-client-configuration/)
1. Install and configure the social connection in the [Auth0 Marketplace](https://marketplace.auth0.com/integrations/unstoppable-domains) and Auth0 [Dashboard](https://manage.auth0.com/). Configuration instructions are on the marketplace integration page.

It takes five minutes. The (simplified) login flow looks a little like this:

![Unstoppable](https://images.ctfassets.net/23aumh6u8s0i/2z9a1dPN8BZLdbweEtBUVy/810fedf4d956033928516cc4d3331d7c/02_marketplace.png)

## What's Next?

The Auth0 Lab team is actively exploring the best ways to enable developers to build applications that rely on Web3 identity constructs and help bridge the Web2 and Web3 worlds. You can follow our progress on [Twitter](https://twitter.com/auth0lab). If you're interested in speaking with the team, join our [Discord](https://discord.gg/xkbkz9rZcD) and start a thread.

The [Auth0 Marketplace](https://marketplace.auth0.com/) is looking for Web3 partners to build new extensions onto Auth0. Visit [https://auth0.com/integrate](https://auth0.com/integrate) to learn more.


Sign in with Unstoppable Domains, Now on Auth0 Marketplace

justin-hinerman

Justin is a Software Engineer at Auth0, focusing on solving authorization challenges for customers. Before Auth0, Justin spent several years as an Identity Management consultant and architect. It was in this job that he came to appreciate the many challenges customers face when trying to implement identity. This knowledge informs his current work at Auth0, trying to make identity as simple as possible for our customers. In his free time, he enjoys spending time with his family, playing soccer, camping, traveling, and playing drums.

Software Engineer

Justin Hinerman

Auth0 now provides your own custom domain for login with a central authorization server.



## Using Custom Domains to Brand Central Authorization Servers

Authenticating with a provider through a central authorization server provides you with a standards-based, maintainable, and secure login approach. This type of login also provides single sign-on benefits and a modern user experience. You can explore the[ benefits of this architecture further in this blog post](https://auth0.com/blog/authentication-provider-best-practices-centralized-login/).

For those who are not familiar with the concept, you may have noticed that you are always redirected to [accounts.google.com](https://accounts.google.com) when you log into Google sites such as Gmail or Youtube. Google has a _central authorization server_ that is used across all of their applications and third-party apps.

![Google central authorization server](https://images.ctfassets.net/23aumh6u8s0i/7CnL0OedgtBQGe3FxUbyfE/f94f36fcd0c31e2fccd6570b1d6c8fb7/google)

Auth0 provides this same capability out of the box, allowing you to unify login for your own brand and products. Enabling Auth0's central authorization provider, [Universal Login](https://auth0.com/docs/hosted-pages/login), is easy, straightforward, simple to configure, and can be customized to suit your brand.

Customers who prefer this experience to be served from their own domain, instead of `[your-account].auth0.com`, can configure their own custom domain in Auth0. This feature is available for all free-tier customers. Adding your own custom domain to an existing implementation only requires small code changes thoroughly detailed in our [custom domain setup docs](https://auth0.com/docs/custom-domains#step-3-complete-feature-specific-setup). Simple configuration can be completed within your Auth0 dashboard.

<include src="TweetQuote" quoteText="You can configure your own custom domain in Auth0. This feature is available for all paid customers."/>

## Benefits of Using a Custom Domain

### End-User Benefits

By using a custom domain for your authentication page, you keep your users interacting with you within the context of your brand, which helps you build brand loyalty. Users are not redirected to a third-party site that breaks the branding context. This prevents users from becoming confused about whether or not they are still running a transaction or operation with you.

For example, if your Auth0 domain is `northwind.auth0.com`, you can have your users to see, use, and remain on `login.northwind.com`.

<include src="TweetQuote" quoteText="Using a custom domain with Auth0 allows your users to feel confident that they are providing their credentials to the right party. Authentication happens within the context of your brand."/>

Auth0 support for custom domains allows us to do the authentication heavy lifting for you without compromising your branding experience.

### Customer Benefits

Brand loyalty from users is a pillar for the success of an organization of any size. One of the ways to build brand loyalty is by offering a consistent branding experience to users. It's important that your users always feel that they are interacting directly with you to avoid confusion or session abandonment.

From the security point-of-view, using [Universal Login](https://auth0.com/docs/hosted-pages/login) is the preferred way to handle end-user credentials. It allows you to have comprehensive control of authentication in one centralized place, as opposed to having individual applications handling credentials. Consequently, having your authentication services contained in one place will make your application architecture more maintainable. Applications are only given the access they need and authentication services can be scaled easily.

You can mitigate certain phishing attacks when your users expect to run transactions within your domain. Having that domain consistency will allow your users to easily and quickly reject phishing attempts.

Universal Login also offers you simplicity as an implementation advantage. You don't have to worry about integrating login user interfaces into different applications. When you use Auth0 Universal Login, you get all the features you need in the fastest possible way: redirecting to a common login interface. Adding custom domains to this workflow creates a seamless experience for your developers and end-users.

## Custom Domain Authentication Features

Core Auth0 features and flows support the use of custom domains:

* OAuth 2.0/OIDC-Compliant Flows (those using the `/authorize` and `/oauth/token` endpoints).
* Database and Social Connections.
* SAML Clients and Connections.
* A full list of features supporting the use of custom domains is available in the [feature section](https://auth0.com/docs/custom-domains#features-supporting-use-of-custom-domains) of our custom domains document. New features, such as enterprise connections, will be added to the list as they become available. Keep an eye on that space!

## How It Works

To [configure your custom domain with Auth0](https://auth0.com/docs/custom-domains#how-to-configure-custom-domains), go to your account settings, select Custom Domains, add your own domain, and follow the instructions.

![Auth0 custom domains tenant settings](https://images.ctfassets.net/23aumh6u8s0i/4sOb3yHNVMECyroBboPtTX/11e347f12d8b3ee97b028818e021cbfc/custom-domain-setup-auth0-dashboard.png)

You will need to complete a [verification process](https://auth0.com/docs/custom-domains#step-2-verify-ownership) for your domain that varies depending on whether you decide to use an Auth0-managed or a [self-managed certificate](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership).

Your existing integrations using your `[your-account].auth0.com` domain will continue to work. After migration to your custom domain is complete, users will have to log in again since existing sessions will no longer be valid.

## Custom Domain Self-Service

Different than other solutions, Auth0 not only gives you the option to use a custom domain, but Auth0 also empowers you with full control over setting up and using your custom domain for authentication. Flexible self-service options are available through our Dashboard for you to directly handle selecting, verifying, and implementing your custom domain. You don't have to wait on us for anything to complete this process. You are in charge.

## Using Custom Domains with Auth0

[Atlassian](https://www.atlassian.com/) is an early-adoption Auth0 customer using a custom domain. Atlassian is consolidating all of their B2B and B2C products under a central authorization provider at [id.atlassian.com](https://id.atlassian.com).

![Atlassian central authorization provider](https://images.ctfassets.net/23aumh6u8s0i/6gwmZK2fxPEmUWFZ1t4Tdf/85045a917ff13e7b2951a593aa836a03/atlassian)

Other Auth0 customers currently using custom domains with a central authorization server include [AGL](https://www.agl.com.au/residential), [National Life Group](https://www.nationallife.com/), and [News UK](https://www.news.co.uk/).

With the launch of custom domains with Auth0, your users will benefit from a first-class login experience, while keeping your brand through a trustworthy domain.

<include src="TweetQuote" quoteText="Using custom domains with Auth0 allows your users to benefit from a first-class login experience while keeping your brand through a trustworthy domain."/>

For more information, check out our [Custom Domains documentation here](https://auth0.com/docs/custom-domains).


"domains"