Skip to main content
Triggers are points in the Auth0 process where Actions can be added for required customization. Multiple Actions can be placed in a Trigger, executing in sequence. Excluding the Custom Token Exchange, triggers can be synchronous (blocking) or asynchronous (non-blocking). Each trigger has specific Objects and APIs. They may differ based on your connection (such as connection). To explore reference Objects and APIs for specific Actions for a trigger, select the trigger below, noting Auth0’s definition of a passwordless connection.

Signup and Login

When a user is added to a database or passwordless connection (Signup), or as part of a user’s authentication transaction (Login).

MFA Notifications

When using SMS as a factor for (MFA) or to configure a custom provider.

Password Reset

When a password reset request is initiated.

Machine to Machine

When an application, instead of a user, is authenticated and authorized to use your APIs.

Custom Token Exchange

When a Custom Token Exchange Request is received to log a user in.

Credentials Exchange

Learn about Credentials Exchange Actions, which run when an Access Token is issued as part of the Machine to Machine Flow. They can be used to deny the exchange or add custom claims to the access token.

Custom Token Exchange

Learn about Custom Token Exchange Actions, which run when the Auth0 Authorization Server receives a Custom Token Exchange request to log a user in.

Event Stream

Learn about Event Stream Actions, which run asynchronously when subscribed event types occur within your Auth0 tenant. They can be used to forward events to external systems without affecting the user's transaction.

Password Reset Post Challenge

Learn about Password Reset Post Challenge Actions, which run after a user completes the first challenge during the password reset journey but before they set a new password.

Post Change Password

Learn about Post Change Password Actions, which run after a Database connection user resets or changes their password. They can be used to notify another system that the user's password has changed.

Post Login

Learn about Post Login Actions, which run after a user logs in and when a Refresh Token is requested. They can be used to control access, enrich tokens and user profiles, and enforce custom MFA policies.

Post User Registration

Learn about Post User Registration Actions, which run after a user has been created for a Database or Passwordless connection. They can be used to notify another system that a user has registered.

Pre User Registration

Learn about Pre User Registration Actions, which run before a user is added to a Database or Passwordless connection. They can be used to add metadata to the user profile before it is created or to deny a registration.

Send Phone Message

Learn about Send Phone Message Actions, which run during the enrollment and challenge process when SMS or Voice is used as a factor for Multi-factor Authentication (MFA).