User import behavior is being updated to allow for upserting users by user_id and username in addition to email.
The changes document has been updated to accurately reflect v2 routes that can be used as alternatives to deprecated v1 routes.
Update Restrictions for Auth0 Penetration Testing Policy to include Management Dashboard
The save-and-refresh-tokens.md file used deprecated compile instead of implementation. To keep consistency the file points to the docs.
The _auth0.md and the _api_authz.md files were both using redundant and inconsistent gradle instructions. A _gradle file was created on the includes for reusage and consistency.
Updated the Logs Query Syntax to remove temporary limits on the date functionality.
Updated the Rate Limit Policy to reflect the new limits on the /authorize path.
Updated tutorial to reflect updates to the UI.
New documentation has been added describing the Auth0 Deploy CLI tool which allows you to import/export tenant configuration objects.
Updated tutorial to describe how both the IP address passed as part of the auth0-forwarded-for header, and the IP address of the request itself, will be matched against the configured whitelist for brute-force protection wnen sending the end-user IP from your server.
A new document, Recommended Tenant Settings, was added with best practices and tips on tenant configuration.
A new document, Recommended Application Settings, was added with best practices and tips on application configuration.
A new document, Recommended Connection Settings, was added with best practices and tips on connection configuration.
A new document, Best Practices: General Operations, was added with best practices on general Auth0 usage and operation.
A new document, Best Practices: Rules, was added with best practices for writing and managing rules.
The rule illustrated in this example is easily circumvented and should not be utilized as a robust control for requiring MFA. Therefore, it has been removed from documentation.
Migration guide explaining how to migrate API calls and responses from the /oauth/ro endpoint to the /oauth/token endpoint.
Updated User consent and third-party applications to fix a code example.
The Step-Up Authentication guidance has been updated and two new tutorials were added: How to Implement Step-up Authentication for Web Apps, and How to Implement Step-up Authentication for APIs.
The content of How Auth0 can help with GDPR Compliance has been updated. New tutorials were added on how to track user consent with Lock or with a custom UI.
A new page, User Search v3, was added with documentation on version 3 of the user search API.
The Step-Up Authentication with Custom MFA Rules tutorial was removed. The sample was removed as well from GitHub. The tutorial was describing the old approach that is not standards based. New tutorials are currently being written on how to do this using either ID Tokens or Access Tokens.
A new security bulletin was added, documenting a vulnerability identified for auth0.js versions prior to 9.3: Security Vulnerability for auth0.js < 9.3.
A new document, Extending the plugin, was added with instructions on extending the Login by Auth0 WordPress plugin.
A new tutorial, Migrate from Azure Access Control Service to Auth0, was added with instructions on migrating from Azure Access Control to Auth0 and connecting to a WS-Federation identity provider.
New version of the Auth0 .NET SDK has been released. It adds support for all the latest updates to the Authentication and Management API.
A new document, Native Passwordless with Universal Login, was added with instructions on setting up Universal Login for native applications that require passwordless authentication.
The Auth0 migrations that have already been enabled for all customers were moved to a new article, Past Migrations. Migrations now includes only the active migrations.
Updated the email providers document to describe how to use SparkPost.
A new document, Alterian Integration, was added with instructions on importing Auth0 user data into Alterian.
A new document, Constant Contact Integration, was added with instructions on importing Auth0 user data into Constant Contact.
A new document, Oracle Eloqua Integration, was added with instructions on importing Auth0 user data into Eloqua.
A new document, Sailthru Integration, was added with instructions on importing Auth0 user data into Sailthru.
A new document, Salesforce Integration, was added with instructions on importing Auth0 user data into Salesforce.
A new document, Salesforce Marketing Cloud Integration, was added with instructions on importing Auth0 user data into Salesforce Marketing Cloud.
A new document, Watson Campaign Automation Integration, was added with instructions on importing Auth0 user data into Watson Campaign Automation.
A new endpoint was added at the Authentication API Explorer: /oidc/register. This endpoint can be used to dynamically register a client with Auth0.
A new Security Bulletins section was created. Any security bulletins about Auth0 vulnerabilities will be published in this section. The first is CVE 2017-17068 Security update for auth0.js popup callback vulnerability.
A new landing page for Auth0 Integrations was added.
A new document on Adobe Campaign Integration was added.
A new document on MailChimp Integration was added.
A new document on Marketo Integration was added.
A new Dashboard Overview article was added at the Getting Started section of our docs.
A new document on how to Migrate Users from Gigya to Auth0 was added.
A new document on how to Migrate Users from Stormpath to Auth0 was added.
A new document on how to work with rate limits in the PSaaS Appliance was added.
A new document on [User Search]](https://auth0.com/docs/users/search) was added covering best practices for using the Users, Users by Email, and User Export API endpoints.
A new document on how to Migrate Users from Okta to Auth0 was added.
Docs on how GDPR affects Auth0 and its customers.
A new doc called Connect Your PingFederate Server to Auth0 was added with instructions on setting up a connection between a PingFederate Server and Auth0.
A new doc called PSaaS Appliance Remote Access Options was added with information on how to choose the remote access option most appropriate for your use case/implementation scenario.
A new doc on implementing User-Initiated Multifactor Authentication was added.
A new doc called Connecting WS-Federation Providers with Auth0 was added with instructions on setting up a connection between a WS-Federation Identity Provider and Auth0.
A new doc called Securing Google Cloud Endpoints with Auth0 was added with instructions on securing a Google Cloud Endpoints API with Auth0.
A new doc called Using LDAP Authentication with Auth0 was added with instructions on setting up an LDAP connection.
Updated the Configure Okta as an OpenID Connect Identity Provider document with steps on obtaining custom claims from Okta.
A new doc call Account Link was added to describe installing and using the new Account Link extension.
A new doc called Testing Your Auth0 Implementation was added with guidelines for testing and ways to troubleshoot performance issues.
A new doc was added for the Mobile+API architecture scenario. The scenario features a mobile app (with an accompanying Android sample) which uses an API (sample in Node.js). The application uses OpenID Connect and the Authorization Code Flow with Proof Key for Code Exchange (PKCE) to authorize users with Auth0.
A new tutorial was added on how to configure Android App Links for your Auth0 Android client.
A new tutorial was added on how to use Auth0 to secure APIs managed by Azure's API Gateway.
Updated the IP Address Authentication document and made it visible at the site.
A new doc was added on how to create an ADFS SAML Connection.
Added the /oauth/revoke endpoint at the Authentication API Explorer. It can be used to revoke a Refresh Token.
Updated AWS integration docs to reflect changes to AWS and Auth0.
A new tutorial was added on how to secure your API Gateway APIs using custom authorizers that handle Auth0 Access Tokens.
A new doc was added on how to use the Pre-Deployment Tests to ensure that your tenants are ready for use in a production environment.
A new doc was added, that provides an in-depth summary of the roles and responsibilities allocated between Auth0 and the subscriber.
A new doc was added for on deleting vs. resetting tenants.
A new doc was added on what settings are available when you choose a particular Client type.
A new doc was added for the SPA+API architecture scenario. The scenario features a Single-Page Application (with an accompanying sample in Angular 2) which talks with an API (sample in Node.js). The application uses OpenID Connect and the OAuth 2.0 Implicit Grant to authorize users with Auth0.
A new doc was added with information on choosing between a native or browser-based user experience when implementing Auth0.
A new doc was added with information on best practices when revoking access to protected resources.
A new doc was added with information on the structure of a JSON Web Key Set and how to use it to verify the signature of a JSON Web Token.
A new doc was added with instructions on configuring a SAMLP Connection.
A new doc was added that presents an overview of the latest changes in Auth0's authentication flows, explains why they were made and points to other detailed tutorials to help the users adopt these changes.
A new doc was added that explains more about the user picture field and how to use the user_metadata to change it.
A new tutorial was added showing how to represent multiple APIs using a single Auth0 API.
A new doc was created. It explains the differences between Access Token and ID Token and why the latter should never be used to secure an API.
A new doc was created on how to connect Google Apps with Auth0.
A new doc was created on how to reset your Auth0 account password.
The Auth0 Authentication API auth0.js scripts have been updated to version 8.
Hooks docs were marked as in Beta version.
A new document was created on how to use Hooks to change the scopes and add custom claims to the tokens you got using Client Credentials Grant.
Released new docs on Auth0 Hooks. Auth0 Hooks allow you to extend the Auth0 platform using Node.js code.
Released new version of Refresh Tokens (API Authorization). The legacy version is still in place and you can find it at Refresh Tokens. The legacy doc will be served as default, with a panel at the top referring to the updated one.
A new doc was released with details on all the validations than an API should perform on a Bearer Access Token: Verify Access Tokens.
A new document was created on what changed in the flow for generating Auth0 Management APIv2 tokens, why, and how you can generate a long-lived token using JWT.io.
A new doc was added showing how to upgrade or change your Auth0 subscription.
New version of the Auth0 Management APIv2 Token has been released.
A new document was created on how to set up Single Sign On (SSO) integration with Disqus.
A new document was created on Dynamic Clients with info on Third Party Client characteristics, how to enable dynamic registration and how to register a client, using the Management APIv2.
A new document was created on how to configure and utilize the new SSO Dashboard Extension.
Added documentation on Auth0 Professional Services:
A new document was created on how to configure Auth0 to serve as an Identity Provider for Oracle Eloqua Marketing Cloud.
A new document was created on how to handle returning users after authentication.
A new document was created on how to add and remove admin users in the Auth0 dashboard.
A new document was created on how to configure and use the Visual Studio Team Services Deployments extension.
Added support for proxies by passing a custom HttpMessageHandler to the constructors of the AuthenticationApiClient and ManagementApiClient classes.
A new document was created on GitLab Deployments extension. The GitLab Deployments extension allows you to deploy Rules, Hosted Pages and Database Connection scripts from GitLab to Auth0.
A new APIs overview document was created, with information on what an API is, its role in authorization flows, how to configure one using the dashboard and the different available signing algorithms.
A new document was added on how to use the state authentication parameter.
A new architecture scenario was added showing how to implement SSO for a regular web app using OpenID Connect.
New version of the Auth0 .NET SDK has been released. It adds support for all the latest updates to the Authentication and Management API.
A new document has been added on cancelling your Auth0 subscription.
New documents have been added to the React quickstart:
A new quickstart was added on how to configure and use the Auth0 with Cycle.js.
The ASP.NET Core Quickstart for MVC applications has been updated to demonstrate various scenarios for integrating Auth0 into your applications.
Update the first section of the doc, for clarity and to better reflect the layout of the page.
A new document was created on how to configure and use the GitHub Deployments extension.
A new document was added on how to configure and use the Auth0 to Logstash extension.
Updated JWT doc with info on signing algorithms.
Added note at User Profile document on how to get a JWT when impersonating a user, using the impersonation endpoint.
Replace Java library URL with the new page that lists all available docs, libraries and samples that we offer on Java.
New Java libraries, sample projects and docs have been released:
Added doc on inviting new co-administrators to Appliance instances
Added doc on how to create new users in the Management Dashboard
A new document was added on how to impersonate users.
Updated doc with sections on how to impersonate a user, block/unblock a user, and delete a user.
Updated doc with extension lifecycle information and added new extension repository (Auth0 Extension with Hooks).
A new document was added on how to configure and use the Auth0 to Splunk extension.
Quickstarts have been added for ASP.NET Core, both for MVC applications and Web API.
A new document was added detailing the Appliance's infrastructure requirements.
A new document providing a high-level overview of the Geo HA Appliance model was added.
A new document detailing how to set up CLI integration with the Appliance was added.
A new tutorial on backing up the Appliance via CLI was added.
A new document documenting various features of the Appliance dashboard/configuration area was added.
A new document documenting various monitoring features of the Appliance was added.
Updated doc with latest OneLogin and Auth0 screens and processes. Added new sections for connection mappings and user profile customization.
Beginning of Angular SDK Quickstart. Step 1 which is Setup and Login has been created.
Added a new section depicting the various Architectural Scenarios when implementing Auth0.
A new section of documentation was added for comparing the use of Lock vs. Custom UIs.
A new section of documentation was added for Opening and Managing Tickets in Support Center
A new section of documentation was added for Anomaly Detection explaining the feature.
Updated the page to reflect new rules on using Auth0's built in email provider. Moved content on customizing emails to a new page.
A new section of documentation was added for Changing a User's Password. It explains how to use the API to change the password, where to edit the password change email and how to manually change a password.
A new section of documentation was added for API Authentication and Authorization. These documents are for a preview feature so the content and implimentations are subject to change.
New version of the Auth0 .NET SDK has been released. It adds support for offline tokens to the Authentication API, as well as removing a user's MFA provider via the Management API.
The new version of the Auth0 Node.js SDK adds support for the logs API, the new password reset API, and adds Webpack build support. See the github project for more details.
A new article was added showing how to blacklist selected user attributes so they do not persist in Auth0 databases.
A new landing page giving an overview of our available APIs, as well as an article explaining how to use the new Auth0 Postman Collections with our APIs.
A new article on customizing email templates using Liquid was added.
A new article on customizing error pages displayed to users in the event of an authorization error was added.
A new article was added documenting API end point rate limiting.
The new version of the Auth0.NET SDK has been released which conforms to async method naming guidelines. See the github project for more details.
A new tutorial was added showing how to setup Auth0 with Ionic 2.
The new version of the Auth0 Ruby SDK has been refactored and updated to support the Auth0 Management API v2.0. See the github project for more details.
A new tutorial was added showing how to generate a JWT using .NET. An example was also added to GitHub.
A new tutorial was added showing how to setup Auth0 with Hapi.
The new version of the Auth0 Node.js SDK has been refactored and updated to support the Auth0 Management API v2.0. See the github project for more details.
The new version of the Auth0.NET SDK has been refactored and updated to support the Auth0 Management API v2.0. Additionally, the library is now PCL so you can use it on a variety of platforms. See the github project for more details.
The new Python SDK supports the Auth0 Management API v2.0 as well as the Authentication API. See the github project for more details.
New tutorials for Windows UWP Apps for both C# and Javascript were published. Additionally, you can find libraries and samples to make integrating Auth0 into your UWP app even easier.
A new tutorial was added showing how to setup Auth0 with Aurelia.
A new tutorial was added showing how to setup Auth0 with Electron.
A new tutorial was added showing how to setup Auth0 with Vue.js.