Actions Integrations for Partners
Partners like you use Actions Integrations to build zero-code solutions that tie their products into Auth0 workflows. Actions Integrations let Auth0 customers implement solutions like identity verification or consent management without writing any code. You write the Actions Integration; customers drag and drop it into their workflow.
Create and publish an Actions Integration
Creating an Actions Integration involves planning, building, and testing. Before you make it available to customers in the Auth0 Marketplace, Auth0 reviews the Actions Integration. For information about the Auth0 Marketplace, read Marketplace Partners.
1. Determine your use case
Identify what use case your Actions Integration will address. What problem will it solve for customers? How will it solve the problem? For more information, read Defining an Integration Use Case.
2. Choose a flow
Login flow runs synchronously after a user successfully signs up or logs in. Login events include interactive flows (like username/password or federated login) and non-interactive flows (like session checks and refresh token exchanges). To learn more about this flow, read Login Flow.
Machine to Machine flow runs synchronously when an application requests an access token using the client credentials grant. To learn more about this flow, read Machine to Machine Flow.
Pre User Registration flow runs synchronously before Auth0 adds a user to a database or passwordless connection. This flow does not run for federated logins like enterprise or social connections. To learn more about this flow, read Pre User Registration Flow.
Post User Registration flow runs asynchronously after Auth0 adds a user to a database or passwordless connection. This flow does not run for federated logins like enterprise or social connections. To learn more about this flow, read Post User Registration Flow.
Post Change Password flow runs asynchronously after the customer changes a password for a database connection user. This flow does not run for password changes on other types of connections. To learn more about this flow, read Post Change Password Flow.
Send Phone Message flow delivers a phone or SMS message as part of a custom MFA provider. To learn about custom MFA providers, read Customize Multi-factor Authentication SMS and Voice Messages. To learn more about this flow, read Send Phone Message Flow.
3. Build an Actions Integration
Once you’ve decided which flow fits your Action Integration's use case, build your Action in a testing tenant. For instructions, read Write Your First Action. This Action will be the basis for your Action Integration code.
To learn how to make your Actions Integration secure and stable, read Actions Coding Guidelines. Also follow these guidelines specific to Actions Integrations:
When building your Action in a test tenant, use secrets for all values that a customer needs to provide (such as identifiers, tenant names, and thresholds). When you submit your Actions Integration, Auth0 asks which fields must be encrypted at rest (remain secrets) and which can be editable text fields.
Use a debug/test mode configuration flag for logging that helps with setup or troubleshooting. Actions Integrations should rarely output logs for all executions.
Write secret names in
ALL_CAPS_SNAKE_CASEto ease review.
Action Integrations are closed source; customers can neither see nor modify the code. Any customer-specific input required to control the Action Integration must come from secrets or configuration.
4. Test your Actions Integration
Because Auth0 reviewers don't have access to your service, you must test your Action before submitting it for review. Manually test both successful executions and edge cases. Include these checks:
Does the Action fail silently or block further execution?
How does the Action work if an HTTP request fails?
What, if any, error messages are exposed to users?
What information is logged?
Can the Action be bypassed or spoofed?
During the submission process, Auth0 asks for unit test coverage for the success path. Auth0 provides all the tooling and examples needed to make this as simple as possible.
5. Submit your Actions Integration
Once you’ve written and thoroughly tested your Actions Integration, submit it to Auth0 for review: submit an Auth0 Marketplace service request. After an initial review of the request, Auth0 sends you a link to a GitHub repository with instructions on how to document, test, and submit your Actions Integration.
6. Publish your Actions Integration
Once Auth0 reviews your Actions Integration, we send you a preview of your listing and confirm when to publish it in the Auth0 Marketplace. Once it’s live, we send you a URL to the published Actions Integration. When you promote your Actions Integration, you can share the link with customers and potential customers.