jira-cooley

Jira is a Sr. Partner Manager for the Auth0 Marketplace. He works with a growing portfolio of key ISV technologies and integration partners that extend and complement our core capabilities. Jira is focused on helping bring new integrations to life for our customers!

Sr. Partner Manager, Auth0 Marketplace

Jira Cooley

Spotlight on a few recent additions to the marketplace

Our platform goes far beyond the login box. Customers love the extensibility features Auth0 provides to solve their own unique use cases. However, why build it yourself when you can find IAM-adjacent solutions already built for you? This is why we built with [Auth0 Marketplace](https://marketplace.auth0.com/), making it easier to discover the integrations you need to solve identity. The Auth0 Marketplace allows us to quickly connect customers with our integration partners and allows you to customize a unique identity solution. Our partners are tapping into the nearly endless possibilities for customized integrations, and we’re excited to see this list grow.

So, to celebrate all the awesome integrations and to inspire you as well, we’re going to start sharing the newest integrations we’ve launched recently:

## LexisNexis

![LexisNexis](https://images.ctfassets.net/23aumh6u8s0i/1mKHoqCJ2g1IjZUWHHWTxk/35e5b2d6617cff649defddd51daa1775/01_LexisNexis.png)

[LexisNexis](https://marketplace.auth0.com/integrations/lexis-nexis) Risk Solutions Dynamic Decision Platform leverages insights from billions of data assets to digitally perform risk assessment. From the Dynamic Decision Platform Portal, the configured risk policy will orchestrate LexisNexis Risk Solutions products such as LexisNexis® ThreatMetrix®, LexisNexis® BehavioSec®, LexisNexis® Emailage®, LexisNexis® PhoneFinder, InstantID® and LexisNexis® FlexID. When the LexisNexis Risk Solutions integration is combined with an Auth0 transaction, such as a log-in event, the LexisNexis Risk Solutions integration results in a risk score mapped to defined outcomes such as step-up authentication, passing without further friction or rejecting, resulting in blocking the transaction.

## Persona

![Persona](https://images.ctfassets.net/23aumh6u8s0i/7nkPa7map5dOBr2L6AR5fZ/fd7ba21c4b439c9292d0e41055f8ec56/02_Persona.png)

Add an additional level of assurance to your log-in experience without hurting conversion with [Persona](https://marketplace.auth0.com/integrations/persona)’s identity verification flows via the new [Persona action](https://marketplace.auth0.com/integrations/persona) in the marketplace. [Persona](https://marketplace.auth0.com/partners/persona) is an identity verification platform trusted by companies like Square, Branch, and Coursera to scalably tackle any identity challenge, from automating onboarding decisions to fighting fraud. Use the Persona action to easily customize and trigger any combination of automated verification methods based on how risky a user is after signing up or logging in for your application. Once users are verified by Persona and authenticated by Auth0, use the Persona platform to automate any follow-up action like updating your CRM or sending an email.

## Badge

![Badge](https://images.ctfassets.net/23aumh6u8s0i/6GZRh6u5lNuC1YkklufSpz/c75cac7d7f223f67959f381e2ba28862/03_Badge.png)

[Badge](https://marketplace.auth0.com/integrations/badge) enables privacy-preserving authentication for users to enroll and authenticate on any device without storing PII. This enables user-centric privacy, allowing users to issue and revoke digital identity and keys on-demand using biometrics and/or other factors.

The Badge Auth0 connector provides a no-code integration to seamlessly use Badge for privacy-preserving authentication in your Auth0 workflow.

## Crossmint

![Crossmint](https://images.ctfassets.net/23aumh6u8s0i/6dsCTQc3UUfUgSRQfXW3RV/277f4d615c36fe9cb8f71dc562217f41/04_Crossmint.png)

Easily deploy a Whitelabel Web3 wallet using [Crossmint](https://marketplace.auth0.com/integrations/crossmint-wallet) with Auth0’s authentication directly on your website or app. You can now enable features, like token-gating and digital customer engagement, using NFTs with just a few clicks.

Crossmint provides developer tooling to make it easy and safe to deploy, acquire, and custody NFTs. Learn more about our products at [crossmint.com](https://crossmint.com/).

## Verosint

![Verosint](https://images.ctfassets.net/23aumh6u8s0i/5uce0w6ZHsHHTD042yDUy/0a5c3fe07444b38876e3a5e66475bcca/05_Verosint.png)

[Verosint](https://marketplace.auth0.com/partners/verosint): Stop bad actors before the damage is done. We detect fraud early at the point of login, preventing fraud incidents before they escalate to malicious behavior, financial loss, or data breaches. Automate fraud prevention to reduce manual review time. We go beyond generating a simple fraud score that requires manual review and intervention. We allow you to take actions in real-time to mitigate fraud. Faster deployment with immediate data insights No army of consultants necessary. Our SaaS solution can be deployed in a matter of hours.

## LOX24

![LOX24](https://images.ctfassets.net/23aumh6u8s0i/5YOLnCey8GecUJWIgBVZGZ/8ae73790495262284a9484a01d880ef0/06_LOX24.png)

[LOX24](https://marketplace.auth0.com/integrations/lox-24-sms-voice-mfa) is a service that allows you to send and receive SMS and voice messages worldwide through an SMS API. With LOX24, you benefit from German data protection, guaranteed delivery, and low prices. You can use LOX24 for various purposes; the most popular use case of LOX24 is the Two-Factor-Authentication (2FA) via SMS and voice message. This is a security feature that adds an extra layer of protection to your online accounts by requiring a code sent to your phone in addition to your password. With LOX24, you can easily integrate 2FA SMS into your applications and websites to increase the security and trust of your users. There is no monthly fee, no minimum turnover, and no setup fee.

## Zenlogin

![Zenlogin](https://images.ctfassets.net/23aumh6u8s0i/39OgLBtxGlLntLZdIjU7Oc/5d633c7ca6af30d63896617924969108/07_Zenlogin.png)

[Zenlogin](https://marketplace.auth0.com/integrations/zenlogin) is a security API that rests on top of your authentication flow. Whether that flow is custom, Auth0, or Okta, Zenlogin helps secure your user accounts.

How does it do this? When a user logs into their account, an API call is sent to Zenlogin. Zenlogin checks whether anything suspicious is going on (including checking the IP address logging in, the location of the login, the user agent, and whether the login is happening when the user usually logs in.) If Zenlogin determines something suspicious, it will send an email to that user notifying them of the login (including a map of where the login happened). Zenlogin will not block the login; rather, it provides this additional context to your user.

## iValt

![iValt](https://images.ctfassets.net/23aumh6u8s0i/4n4f15APWGDLZXWwpD02xV/79da3189fc1d1149b17b99ba5ed35401/08_iValt.png)

[iValt](https://marketplace.auth0.com/integrations/i-valt-inc-zero-trust-biometrics) provides an IDENTITY verification platform for adding biometrics to logins for any application. Auth0 logins notify the iVALT mobile app to request biometrics. Verification on the mobile ensures that the person logging in is the authorized user, not just the holder of stolen credentials. User experience is a simple notification to their mobile phone, followed by a FaceID or TouchID transaction (Apple or Android), and they are immediately logged in. This approach is much more convenient and secure than 2FA with 6 digits.

## Arkose Labs

![Arkose Labs](https://images.ctfassets.net/23aumh6u8s0i/1xiogzjqrWXHlUmhHWS7i2/d9497bd9ef3cc30c4beb501ad98daf59/09_Arkose_Labs.png)

Financial incentive fuels all fraud. [Arkose Labs](https://marketplace.auth0.com/integrations/arkoselabs) delivers long-term fraud prevention and account security by undermining the economic drivers behind attacks. We help digital enterprises defend the most targeted user touchpoints by uncovering hidden attack signals and sabotaging attackers’ ROI without sacrificing good user throughput.

## IDpartner

![IDpartner](https://images.ctfassets.net/23aumh6u8s0i/tdhHhKFOUr46IE18LKBvR/df5ffab11768a64c85a2d43dadfe129e/10_IDpartner.png)

[IDpartner](https://marketplace.auth0.com/integrations/idpartner) uses bank identity data to offer a fast lane to engage, convert, and verify users. Know that your customers are human - and know their real names if you need to - without a high-friction scan of their identity documents.

## ID.me Action

![ID.me](https://images.ctfassets.net/23aumh6u8s0i/5y1WWQj1bHleASXwXOoC1e/5c60743f2695ad2c8348cda029e49965/11_ID.me.png)

[ID.me](https://marketplace.auth0.com/partners/id-me) simplifies how individuals prove and share their identity online. The ID.me secure digital identity network has 100 million members, with over 70,000 individuals joining daily, as well as partnerships with 31 states, multiple federal agencies, and over 500 name-brand retailers. The company provides identity proofing, authentication, and group affiliation verification for organizations across sectors.

The company's technology meets the highest federal standards and is approved as a NIST 800-63-3 IAL2 / AAL2 conformant credential service provider by the Kantara Initiative. ID.me is the only provider with video chat and in-person verification, increasing access and equity. The team is committed to "No Identity Left Behind" to give everyone a secure digital identity.

## Panther Logstream

![Panther Logstream](https://images.ctfassets.net/23aumh6u8s0i/28I2jfjXfLHBiC7i5pnnyi/a5dfab3340c171cac1630120c0453dbb/12_Panther_Logstream.png)

[Panther](https://marketplace.auth0.com/integrations/panther-log-stream) is a cloud-native threat detection platform that transforms terabytes of raw logs per day into a structured security data lake to power real-time detection, swift incident response, and thorough investigations in a code-driven way. Panther enables customers to manage their detections as code and provides out-of-the-box integrations for dozens of critical log sources; Panther solves the challenges of security operations at scale. Learn more [here](https://panther.com/integrations/logs/auth0/).

## Check Back Next Month!

Make sure you check back next month for our partners' latest releases. In the meantime, check out our [Marketplace catalog](https://marketplace.auth0.com/) for the current list of partner integrations.

Interested in becoming an Auth0 ecosystem partner? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started.


Marketplace Integrations Blog Series

Damian Schenkelman

Damian was one of Auth0's earliest employees. He loves building products for developers and taking things from 0 to 1.
<br><br>
He played key roles in implementing product features and growing the engineering organization in the early stages, and later on defining Auth0's architecture for scale and creating new products. Today he helps shape Auth0's long term strategy and leads Auth0Lab, a small and amazing team doing research and development of forward-looking products.
<br><br>
He spends his spare time with family, and friends, exercising, and catching up on all things NBA.

VP R&D (Auth0Lab)

We’re bridging the Web2 and Web3 worlds with new integrations from our partners

Over the past few months, the [Auth0 Lab](https://lab.auth0.com/) team has researched the [Web3 space](https://auth0.com/blog/identity-and-web3/) and its relation to identity, with a main focus on developer building blocks. From that research, we realized we could play a role in **bridging the Web2 and Web3 worlds.**

What do we mean by bridging? In short, making it easy for developers to create applications that take advantage of constructs from each world as necessary through the help of [Web3 partners and their integrations](https://auth0.com/developers/lab/web3). We think we are well positioned to do this, as "software identity" can serve as that bridge.** **

We took a step toward that goal with the introduction of the [Web3 category in the Marketplace](https://marketplace.auth0.com/categories/web3). This new category will help you seamlessly leverage Web3 constructs when building your applications. In this post, we’ll explore the tools we’ve made available and give you a brief overview of our analysis of Web3 and decentralized technologies at large.

## Why Web3?

Let’s start by defining what we mean by Web3. We don't mean cryptocurrencies and decentralized finance. Those are specific _applications_ of Web3.

To us, Web3 includes the philosophies, concepts, and technologies that prioritize user [choice](https://www.notboring.co/p/the-web3-debate?s=r) and [ownership](https://future.a16z.com/why-web3-matters/) and that one can use to build decentralized services. [Blockchains](https://en.wikipedia.org/wiki/Blockchain), tokens (fungible or non-fungible), protocols, services, [dApps](https://ethereum.org/en/developers/docs/dapps/), and [users' keys](https://ethereum.org/en/developers/docs/accounts/#externally-owned-accounts-and-key-pairs) are some (but not all) of the elements that make up Web3.

At its core, Web3 is about user choice. As Packy McCormick, founder of NotBoring,[ put it](https://www.notboring.co/p/the-web3-debate):

_“Some people will want centralized services, some will want fully decentralized ones, and many will choose points on the spectrum in between that work for them at different times and for different things. And we're arguing that Web3 gives them that choice.”_

From our research, we believe Web3 can help application builders provide personalized user experiences and satisfy privacy and compliance use cases. But for the space to really take off, it needs to deliver a strong user experience and protect customer data and assets. 

Countless companies rely on the Okta Customer Identity Cloud to help them meet their UX and security goals. We are excited to bring our capabilities to developers and companies looking to leverage Web3 constructs in the identity space, and the Web3 Marketplace category is our first step toward that goal.

## A New Set of Building Blocks for Identity

Web3 constructs introduce a set of new "decentralized identity" building blocks. With them, users can own their credentials and choose what data they share and what remains private.

Let's go over those building blocks in detail.

**Private keys as credentials.** Users’ private keys can act as credentials to authenticate with services, providing passwordless login user experiences. 

For example, [Sign-in with Ethereum](https://eips.ethereum.org/EIPS/eip-4361) (SIWE) provides sign-in functionality for Ethereum accounts. More generally, [Decentralized Identifiers](https://www.w3.org/TR/did-core/) (DIDs), a recently approved w3c (World Wide Web Consortium) open web standard, propose identifiers based on asymmetric cryptography and owned by users. Methods like [did:pkh](https://github.com/w3c-ccg/did-pkh) or [did:ethr](https://github.com/uport-project/ethr-did) implement DIDs using addresses/keys from decentralized networks like Bitcoin, Ethereum, Solana, etc. You can watch [this video](https://twitter.com/Auth0Lab/status/1501984414267490311?s=20&t=7ig8XYs2PR9gPBCfr8fUMg) on how we used SIWE in a sample app.

**Public, human-friendly usernames.** These can be implemented by associating friendly names, like jane.eth or gary.wallet, to blockchain addresses via smart contracts. These usernames would act both as a user-friendly way to refer to blockchain addresses and as a single username across all applications that rely on the account's private key for authentication.

**Public User Profiles.** These can be implemented using the aforementioned smart contracts to map attributes (besides usernames) to a blockchain address. Some users might publicly share an avatar/profile picture, email address, or other personal details. 

Applications can then use these profiles to provide personalized experiences to users without requiring the creation of application-specific profiles. Watch [this video](https://twitter.com/Auth0Lab/status/1501984444500033542?s=20&t=7ig8XYs2PR9gPBCfr8fUMg) on how we used public user profiles and usernames in a sample app.

**Public Attestations.** These can be implemented using either non-fungible tokens (NFTs) for "ownership attestations" or "soulbound tokens" (SBTs) for non-transferable attestations. 

[Token gating](https://medium.com/@jshanks21/nft-meaning-token-gating-ad83aef7cccd), where access to specific features is allowed only if a user owns a token on a blockchain, is an example of how these could be used. Shopify is working on [tokengated commerce](https://help.shopify.com/en/manual/products/digital-service-product/nfts#tokengated-commerce). You can watch [this video](https://twitter.com/Auth0Lab/status/1501984507481792519?s=20&t=7ig8XYs2PR9gPBCfr8fUMg) on how we used NFTs for token gating in a sample app.

**Private User Data**. This data is associated with a user's identifier (this works with and without DIDs), and **Privacy-Preserving Attestations** can be implemented using [Verifiable Credentials](https://www.w3.org/TR/vc-data-model/) (VCs) and Zero-Knowledge Proofs (ZKPs). 

**Verifiable Credentials**, cryptographically verifiable digital credentials, can be obtained and stored on a user's phone app (called "wallet", adding to the confusion around the term). 

Later, users can present them (the entire credential or some of its attributes) wherever they want. A benefit of these Verifiable Credentials is that issuers don't need to know where credentials are presented. You can watch [this video](https://twitter.com/Auth0Lab/status/1501984570136272900?s=20&t=7ig8XYs2PR9gPBCfr8fUMg) on how we used Verifiable Credentials to help prove a user's age in a sample app.

## Introducing the Web3 Category in Our Marketplace

The Marketplace allows developers to explore and install integrations for various use cases into their identity infrastructure. With a single click, you can add support for Identity Proofing, implement risk-based MFA, or send application activity to your logging infrastructure, among other things. 

Web3 is built on open standards and composable building blocks, giving developers flexibility in how they design and architect their applications. We want to provide that same composability and extensibility. That's why we’ve partnered with leading Web3 organizations that are building developer tooling to launch the Web3 category on the Marketplace.

![web3 and blockain](https://images.ctfassets.net/23aumh6u8s0i/5hBxjlnYRZDGmNqTnLrfBm/a3ea21e3252993f9dbe0a5cbf6cfa8db/01_web3_and_blockain.png)

### Use Cases

As we started working with Web3 organizations to build integrations for Okta, we discovered integrations typically fit into one of three use cases:

* **Logging in with a Web3 account/private key**: Authenticating to an application as the owner of a particular blockchain address or private key. This provides a passwordless login experience to users that allows them to own their identity without involving third parties like social login providers.
* **Creating a Web3 wallet for a user:** Allows creating and associating a wallet (custodial or non-custodial) to an Okta user that logged in with any Okta connection (social, enterprise, database, etc.). This is a model similar to that of centralized exchanges and some gaming platforms. They use it because it does not require users to have a wallet before signing up, so users don't drop out because of that requirement during the signup process.
* **Use Web3 public constructs for app logic:** Once a user's blockchain accounts are identified, developers can use it within their applications. Potential scenarios include: displaying profile information, listing a user's NFTs, and gating access to content based on NFT ownership.

_We expect that as we learn more and Web3 constructs evolve, the previous three categories/use cases might change. For example, a new use case for reading and writing private data might be available in the future once we have integrations supporting those features in our Marketplace._

### Available Integrations

#### Use case: Logging in with a Web3 account/private key

**[Sign-in with Ethereum](https://marketplace.auth0.com/integrations/siwe) (by [Spruce](https://www.spruceid.com/)):** Sign-in with Ethereum enables users to log in with their Ethereum account instead of relying on a traditional intermediary (e.g., social login). 

Spruce builds decentralized identity developer tooling. They are also developing a self-sovereign user data storage solution for Web3 users and organizations. Self-sovereign user data storage means that it relies on open standards and the user’s keys for security, allowing users to control where they store their personal data and who they share it with.

**[Sign-in with Unstoppable Domains](https://marketplace.auth0.com/integrations/unstoppable-domains) (by [Unstoppable Domains](https://unstoppabledomains.com/)):** Unstoppable Domains allows Web3 users to access apps using their portable digital identity. This integration will allow your users to sign in by proving they own a specific domain from Unstoppable Domains. 

That proof is performed by having the user sign a message with the private key that is associated with the address on which the domain is registered and verifying the message's signature. Your app will be able to access profile information associated with the user's domain, such as wallet address, email, profile picture, social profile, and more.

**[Dock Web3 ID](https://marketplace.auth0.com/integrations/dock-web-3-id) (by [Dock](https://www.dock.io/)):** Decentralized Identifiers are identifiers defined in a w3c recommendation. They allow a party (for example, a user) to prove control over them without requiring permission from any other party (for example, a company). For example, to authenticate using a specific DID, a user can sign a payload with a private key that the DID expresses should be used for authentication. 

Then, another party can verify that the signature corresponds to the specific DID. This integration allows your users to sign in by proving ownership of the authentication key of a Decentralized Identifier (DIDs).

#### Use case: Creating a Web3 wallet for a user

**[Non-custodial Web3 Wallets](https://marketplace.auth0.com/integrations/web3auth) (by [Web3Auth](https://web3auth.io/)):** The Web3Auth integration allows you to create and associate a non-custodial wallet to any Okta user, regardless of how they logged in.

#### Use case: Use Web3 public constructs for app logic

**[ENS Profile](https://marketplace.auth0.com/integrations/ens-profile) (by Auth0 Lab):** The Ethereum Name Service (ENS) integration lets you integrate ENS profile data into your application. You can leverage and display user-picked usernames, avatars, and other pieces of their public profile without requiring users to create them for your specific application.

**[NFT Retrieval](https://marketplace.auth0.com/integrations/auth-0-inc-fetch-nfts) (by Auth0 Lab):** The NFT Retrieval integration allows you to retrieve NFTs from a set of contract addresses and add them to ID Tokens as claims. With this, you can use the user's NFTs in your application's logic. 

> _Today, the NFT extensions assume you also use the [Sign-in with Ethereum](https://marketplace.auth0.com/integrations/siwe) integration to get the user's Ethereum address. In the future, we hope to work with partners to standardize claim names. Standardization should allow integrations to read/write users' blockchain accounts from/to a single claim, improving interoperability between integrations._


## What's Next

Launching the Web3 category is our first step to making it easy for developers to build applications using constructs from the Web3 world.

If you are a developer or company exploring integrations with Web3 technologies, we encourage you to [explore these integrations](https://auth0.com/developers/lab/web3) and take them for a spin. It should take minutes to enable Web3 capabilities for new or existing Web2 apps. 

If you are a Web3 organization creating products for other developers, consider building an Okta Customer Identity Cloud integration. Countless developers and businesses use Okta Customer Identity Cloud to manage identity at scale. By building an integration, you can reach hundreds of potential new customers and users. We explain how the integration development process works at [https://auth0.com/integrate](https://auth0.com/integrate).

![integration](https://images.ctfassets.net/23aumh6u8s0i/2cwAfgp4KrMdWMlMtwfjcm/a640a78e8d55498d46bdb873d135f2c5/02_integration.png)

Okta is excited about the prospect of a decentralized future and looks forward to working closely with the Web3 community. Join our [Discord](https://discord.com/invite/QGHxwDsbQQ) to share your thoughts and tell us about the integrations you want to see in the future. We look forward to working with you. 

Let’s keep building!

Introducing the Web3 Category in Marketplace

MichaelW

Michael has worked in the security space for over 10 years, developing integrations for different vulnerability scanning, SIEM, and SOAR tools. He is passionate about discovering the exponential value that can be had by combining together multiple security datasets rather than using them on their own. As the lead on partner integrations for Pangea, Michael is working on bringing together a group of best-in-market security services for developers to use via API.

Senior Manager - Partner Integrations Pangea

Michael Weinberger

Pangea offers integrations to enhance security for new account registrations and logins

Do developers who are not security experts want to spend their valuable time developing security features? But _should they_, given the considerable room for error? 

Pangea helps remove this margin for error. Pangea is a comprehensive set of API-based security services that can quickly and easily be added to any cloud application, embedded as functions directly into the application source code. Pangea emerged from the idea that key security features should not be repeatedly reinvented by companies every time they build new products. 

Instead, with Pangea, application developers can access a wide selection of out-of-the-box security services to embed security easily in all of their applications. Comparable to AWS for compute APIs, Twilio for communications APIs, and Stripe for billing APIs, Pangea has created a single platform for security — [Security Platform-as-a-Service](https://www.prnewswire.com/news-releases/pangea-cyber-closes-26m-series-b-from-gv-decibel-and-okta-ventures-for-developer-first-security-framework-to-deliver-secure-apps-faster-301689531.html) (SPaaS).

## Keeping Security Simple with Pangea Integrations

As we like to say, Pangea makes it “dead simple to integrate security with just a few lines of code”. With a clear developer focus, Pangea simplifies the varied aspects of security that are required for virtually every application. 

Without Pangea’s SPaaS for developer-first security services, the security puzzle is made up of scattered commercial and open-source pieces. Usually, these pieces are not even API-first, which makes integrations difficult. Pangea specializes in bringing these pieces together in an API-first form, with consistent documentation and guaranteed services compatibility — making it easy for developers to embed security in their applications.

## Pangea Integrations for Marketplace

Three Pangea Integrations have been released for the Auth0 Marketplace — [Pangea - Domain Check](https://marketplace.auth0.com/integrations/pangea-domain-check), [Pangea - Embargo Check](https://marketplace.auth0.com/integrations/pangea-embargo-check), and the [Pangea - Validate Registration](https://marketplace.auth0.com/integrations/pangea-validate-registration). The Pangea - Validate Registration integration uses Pangea security APIs to validate new user registrations. This includes embargo checks using Pangea’s Embargo Check and domain score checks using Pangea’s domain intel service, which contains intelligence on over 390 million domain addresses. The results are all logged to the Pangea secure audit log service.

Configuration can then be done on the Pangea console to view and manage audit logs (redaction and retention), manage embargo lists, and select providers for domain scoring — with no additional code changes. 

## How the Pangea Integration Works

To use the Pangea Marketplace integration, you will need an Auth0 account and tenant as well as a Pangea account.

Pangea setup requires some light integration configuration before adding the Auth0 Action. Note that once the Action is successfully deployed, all new user registrations for a tenant will be processed by this integration. Before activating the integration in production, install and verify the Action on a test tenant.

Once the Action is added, new user registrations will be defended by Pangea APIs. Each new user registration will be checked against Pangea Embargo and Pangea Domain Intel. The user will either be accepted or rejected, and the results will be written to Pangea Secure Audit Log.

## Shifting “Left-of-Left”: Pangea Benefits 

Implementing Pangea provides a number of benefits, including: 

* **Prioritizing security from the get-go of app development**, i.e., shifting responsibility “left-of-left”. Pangea's library of APIs security and compliance requirements are addressed from the beginning, giving developers the ability to drop security into their app runtime code prior to publishing. This can reduce developer cognitive load while covering security from the outset. 
* **Leveraging security intel from leading providers**, such as Crowdstrike, DomainTools, and ReversingLabs, among others, in Pangea APIs.
* **Securing registration decisions with cryptographically secure audit logs**. Pangea audit logs provide built-in redaction and can be used to help meet compliance and regulatory requirements under GDPR, SOC2, HIPAA, and more.

## Simplify Application Security with Pangea 

It’s never been easier for developers to add security to their applications right out of the box. Check out the [Pangea - Validate Registration](https://marketplace.auth0.com/integrations/pangea-validate-registration) integration in the Marketplace to get started.

Pangea — Security with Ease, Now on Marketplace

Oliver Wang

A product manager at Auth0 focuses on  Ecosystem and Extensibility.  With an engineering background, Oliver always puts developers' experience first.  He has mixed industrial experience as a Product Manager, Software Engineer and Data Analyst. This diverse profile unites different team members to deliver value to our customers. Besides work, you can catch him up on a ski hill in the Canadian Rockies.

Product Manager, Ecosystem

darin-laframboise

Expert in Ecosystem strategies. Expert in driving product roadmaps and building long-term growth strategies. Can make quick, data-minded, impact-focused decisions to keep projects on track. Deep background in analytics and data engineering.

Director, Product Management

Darin LaFramboise

Drag-and-drop extensibility for your identity flow

## Okta’s No-Code Approach for Easy Extensibility

Security threats? Regulatory requirements? Privacy laws? User journey expectations? The identity landscape keeps evolving — and increasing in complexity. Keeping up with these changes puts pressure on devs as they try to secure and manage identity flows  — often requiring custom code.

Extensibility is at the core of the Okta Customer Identity Cloud. and Actions Integrations is our answer to all that code-intensive complexity. Instead of building and maintaining custom code, Actions Integrations are easily integrated third-party solutions that can be quickly added to extend your identity flow.


## Drag-and-Drop Extensibility with Actions Integrations

Customers looking to purchase an identity product in the market expect security, privacy, compliance, and ease of use as table stakes, but they also have additional needs beyond what standard identity platforms offer in their core products. They want to customize their identity workflow. No single company can provide a complete identity solution that covers all possible scenarios. Instead of building new capabilities from scratch or trying to understand both Okta and third-party APIs, Actions Integrations allows you to make third-party connections directly, without code. 

Actions Integrations are partner-built and supported drag-and-drop solutions that solve common identity needs that aren’t addressed out of the box by Okta Customer Identity Cloud.

Actions Integrations have been in Beta on our Marketplace for several months while we added additional security and usability features. With the move to general availability, we’ve invested in the security and observability of integrations internally at Okta and added additional tooling for our field support teams to better assist developers who rely on integrations.

## Extending Your Identity Flow with Partner-Built Integrations

With our expanding partner ecosystem, we’re able to provide extensible solutions for a growing number of use cases. Whether adding security measures in heavily regulated industries such as healthcare and financial services or wanting to understand who your customers are for targeted marketing tactics, our Marketplace houses integrations for a number of identity scenarios. Some of our popular categories include:

* Identity proofing: Verify the identity of end users.
* Consent management: Capture and track consent and contact preferences throughout the customer journey.
* Customer data platforms: Collect valuable customer data to feed into downstream systems such as CRMs to create custom online experiences.
* Progressive profiling: Gather more information about users than they provided at initial signup to build a progressive profiling flow.

## How Do I Get Started Using Actions Integrations? 

The Auth0 Marketplace hosts all available integrations where developers can find the pieces that are missing from their identity flow. Simply navigate to the Marketplace in your Auth0 Dashboard or through [Marketplace](http://marketplace.auth0.com), and add the integrations you’d like to try to any tenant; no code is required. These integrations do not count against the extensibility limits defined in our pricing plans. 

If you can’t find an integration that fits your exact needs, we encourage you to explore custom [Actions](https://auth0.com/docs/customize/actions), our pro-code approach to extending Okta Customer Identity Cloud capabilities with custom logic. We also welcome developers and partners to build an integration of your own. Building and launching an Action Integration in our Marketplace allows you to participate in the growing CIAM economy and take advantage of the upcoming growth areas we’re continuing to uncover. 

Visit [auth0.com/integrate](http://auth0.com/integrate) to get started on your integration journey. We have resources to help you, from discovery and exploration to building and launching your integration on Marketplace. 

## Next Steps

Not sure what you’re looking for, or want to know more about the Marketplace and extensibility? Check out [auth0.com/marketplace](http://auth0.com/marketplace), where we have featured content on integration categories, specific partner integrations, and other resources to get you started on your extensibility journey.

Actions Integrations Are Now GA

alexa-bio

Alexa is a Product Marketing Manager on the Auth0 platform team. With a partner and product marketing background, she is focused on growing our marketplace ecosystem working closely with new and existing partners.

Product Marketing Manager

Alexa Jacky

Customizing identity flows by stacking no-code integrations allows dev teams to innovate efficiently

As healthcare delivery models evolve and digital information unlocks new possibilities, a vast array of ecosystem participants face pressure to:

* **Build and manage consolidated patient portals** that link patients, patient advocates, and extended healthcare teams and that extend across multiple service providers.
* **Empower patients** with convenient self-service options and quicker access to appointment information, test results, diagnoses, forms, documentation, and their healthcare providers.
* **Provide rapid virtual care and assistance,** overcoming distance and time constraints and increasing accessibility of healthcare (and related) services.


<br>
From established healthcare providers to newcomers aspiring to dominate entirely new markets, the organizations best positioned to succeed will be those that are best able to implement fundamental identity capabilities and extend beyond the identity basics.

All the while — and in everything they do — healthcare organizations have to comply with complex regulatory requirements (e.g., HIPAA, GDPR), which vary by jurisdiction and are often layered (i.e., state laws versus federal laws).

But with developer resources already in short supply and with a healthcare organization's primary applications rightfully commanding the lion's share of attention, engineering organizations need to satisfy identity requirements as quickly — and with as little custom code to write or maintain — as possible.

For example, Jay Anslow, Senior Software Engineer at [Babylon Health, shared with us that](https://auth0.com/case-studies/babylon-health), "We estimated that it would take a team of eight staff at least a year to meet our new requirements with a home-built solution. As well as the cost of having that team, it would have delayed our timeline, so we wouldn't have been able to get our functionality out the door as quickly."

## Identity Enables the Healthcare Ecosystem

Identity, particularly as it relates to securing sensitive data and complying with privacy regulations, has been a foundation of healthcare since long before the digital revolution — but as healthcare delivery organizations (HDOs) embraced new information formats and leveraged the Internet for collaboration, communications, service delivery, and other functions, customer identity and access management (CIAM) systems became essential elements of healthcare organizations' technology stacks.

On top of the transition that was already happening, the COVID-19 pandemic "caused a seven to ten-year acceleration in consumer and digital trends," [according to Richard Schwabacher, Senior VP of Digital Health and Chief Digital Officer at BioReference](https://auth0.com/case-studies/bioreference). The result is that "Securing, transmitting, and authorizing patient access to health information digitally is now critical to the practice of medicine and core to what is needed from a modern digital health solution."

And CIAM is vital to this functionality. Out of the box, leading CIAM solutions include many features that can help healthcare organizations meet new needs, allowing even small engineering teams to:

* [Create patient-centric experiences](https://auth0.com/case-studies/bioreference), built around each individual’s needs and preferences;
* [Enable a vast, interconnected, and growing healthcare ecosystem](https://auth0.com/case-studies/providence); and
* [Simultaneously meet security, privacy, and convenience](https://auth0.com/security) needs, rather than trading off between these necessary elements.

But while out-of-the-box functionality is important, the real world is a complex and dynamic beast (as anyone who's ever done a year-over-year roadmap comparison understands). Being able to accommodate change and tailor identity to your unique needs — and doing both without drawing too heavily upon developers — is the difference between CIAM as a necessary component of your application stack and CIAM as an operational and competitive advantage.

## Actions Integrations and the Auth0 Marketplace

A modern CIAM solution can tackle [the healthcare identity basics](https://auth0.com/healthcare) (e.g., signups, logins, account updates, password retrievals, etc.), but satisfying advanced use cases often requires transacting with other business systems and third-parties to execute complex conditional flows.

However, identity is a very difficult and specialized domain. Here's a quick exercise: think of a subject that you know a lot about, something where you're truly an expert. And now, think about how non-experts oversimplify the problems in that area and are overconfident in their ability to solve them. Sure, it's not _impossible_ for them to do so, but it will likely take much more time and effort than they imagined, and the implementation would potentially fail to address corner cases and other complexities.

Identity is like that! An in-house developer team could drop everything else and focus considerable effort on extending an identity implementation by building (and maintaining) a custom solution to every new use case — or they could leverage a straightforward way to make identity work with other business systems quickly and effectively.

And that's where [extensibility](https://auth0.com/extensibility) comes into play.

Since launching in late 2020, [the Auth0 Marketplace](https://marketplace.auth0.com/) has helped developers quickly find and install third-party identity solutions for their applications and APIs.

[Actions Integrations](https://auth0.com/blog/auth0-no-code-actions-integrations-now-available-in-beta/) make it even easier to extend Auth0 with partner-built innovations, often with no-code, drag-and-drop ease; in fact, you can even 'stack' these integrations like building blocks to keep up with new needs and address advanced use cases.

To illustrate, let's look at some examples of how [identity proofing](https://marketplace.auth0.com/categories/identity-proofing), [mobile device verification](https://marketplace.auth0.com/integrations/incognia-authentication), [customer data platforms](https://marketplace.auth0.com/integrations/tealium), and [consent management](https://marketplace.auth0.com/categories/consent-management) integrations can be combined and conditionally employed to contribute to a strong security posture and create positive experiences for customers.

### Registering, logging in, and scheduling appointments

To meet growing expectations for convenience, healthcare organizations must make it easy for patients to register and schedule appointments — but at the same time, the signup process must be secure and must address compliance requirements.

Here's how third-party integrations can help satisfy these simultaneous needs:

* The patient initiates the registration process/account creation
* The sign-up flow within the identity engine calls upon an identity-proofing solution to verify the patient's identity
* Next, the flow calls upon a consent management solution to ensure the patient understands and agrees with how their information will be handled with respect to regulations
* Finally, the identity engine encourages the patient to enroll in [multi-factor authentication (MFA)](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) as an added security measure; if the patient agrees, then the flow walks them through the process

To simplify future logins, the identity engine can employ mobile device verification when the patient attempts to access healthcare services via the organization's mobile app.

Once logged in, a patient can schedule an appointment:

* The patient selects "schedule appointment."
* The identity engine uses MFA to verify it is indeed the patient attempting to make the appointment
* If the patient passes the MFA challenge, the appointment is confirmed

Note that this process can be augmented by employing [Adaptive MFA](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa) and limiting MFA's use to when a risk threshold is exceeded.

### Changing/updating personal information

Healthcare organizations handle an enormous volume of sensitive data, including personally identifiable information (PII) and protected health information (PHI). Consequently, it's vital that only authorized users can access and modify information.

Here's a potential identity flow for patient self-service:

* The logged-in patient clicks on "update my profile."
* If the patient is using the mobile app, then the identity engine can call upon a mobile verification solution; otherwise, the identity engine can employ an identity-proofing solution
* With the patient's device or identity verified, they are now authorized to change their information
* If the information being changed is of sufficient sensitivity (e.g., relating to financial or insurance records), then the identity engine can engage MFA as an added layer of security/confirmation
* The patient's information is saved
* The identity engine passes the updated information to the CDP

### Securely accessing healthcare documents and services

Delivering healthcare services requires holding and managing access to huge numbers of documents, from information forms to lab results. Enabling patients to access their healthcare documents eases the workload for staff and can accelerate care.

In addition, telehealth reached new levels of adoption during the pandemic to help protect vulnerable people and reduce the spread of COVID-19 — but with healthcare fraud a real risk, it's important to verify that a patient is who they say they are.

Here's how identity can help. Suppose a logged-in patient clicks to access a particular health document or service. Depending upon the situation, the identity engine can conditionally branch into a number of paths:

* If the patient is using the mobile app, then the flow can call upon a mobile verification solution.
* If the patient is using a new or different device, then the identity engine can initiate an MFA challenge.
* And for especially sensitive information, then the identity engine can call upon an identity-proofing solution.

With verification complete, the patient is now able to access the document or service.

Note that these flows can also incorporate risk scoring and behavioral validation. For example:

* The identity engine can check the patient's device posture against a third-party risk service: if a risk threshold is exceeded, then a higher level of verification can be employed.
* The identity engine can check behavioral data against the patient's CDP profile: for instance, if the patient usually accesses their healthcare portal from a particular geography but in this attempt is somewhere new, then additional verification may be warranted.

### Paying bills

Healthcare organizations also hold vast amounts of financial records — including bills, bank account details, and insurance information — that must be safeguarded. But at the same time, making it easy for patients to view and pay their bills is important.

Fortunately, identity flows can allow patients to view, download, and pay invoices remotely through a third party or an in-house app:

* The logged-in patient navigates to a bill and attempts to open/view it
* The identity engine calls upon mobile verification to confirm the patient's device; alternatively, the identity engine can upon a CDP to confirm the patient's location
* If the device is not recognized or the patient is logging in from a new location, then the identity stack can initiate an MFA challenge
* With the patient's identity verified, they are able to open the bill and access the billing/payment system

## A World of Extensions and Opportunities

Extensibility is a core Auth0 principle. [Our identity platform](https://auth0.com/resources/videos/platform-introduction-video-2020) is designed to be easy to deploy and even easier to tailor to your unique business needs, so you never have to choose between customizability and ease of deployment.

Plus, with [a long list of security and privacy certifications](https://auth0.com/docs/secure/data-privacy-and-compliance) and[ the option to deploy the Auth0 Identity Platform in a private cloud](https://auth0.com/resources/whitepapers/private-cloud-deployment), healthcare organizations can be confident that their identity implementations help meet their regulatory requirements.

We're excited about the potential unlocked by the rich ecosystem of third-party integrations, as they allow our customers to continually add new capabilities as needed.

Whether you prefer the pro-code approach of [Actions](https://auth0.com/docs/customize/actions) or the no-code convenience of Actions Integrations found within [the Auth0 Marketplace](https://marketplace.auth0.com/), we encourage you to explore the options to see which of your identity and identity-related use cases already have a ready-built solution just waiting to be integrated!

Extending CIAM to Enable Modern Healthcare Applications

Stacking integrations from the Auth0 Marketplace enables custom identity use cases with no-code ease

As they compete for attention and conversions in a crowded global marketplace, online retailers and eCommerce companies face a number of challenges. For example:

* **Customers expect personalized omnichannel experiences** at every stage of the buying journey
* **Users want to engage with their apps or services at any time, from any device, in a secure and safe manner** — and they don’t want to spend time with cumbersome account creation
* **The loss of the third-party cookie and tighter app restrictions are threatening marketing strategies** that rely upon cookies and app-based tracking and are forcing a larger dependence on first-party data

The brands that will not only survive but thrive in this dynamic environment will be those that are best able to implement fundamental identity capabilities and extend beyond the identity basics.

But with a developer team that’s busy enough already, it’s important for the business (and for developer sanity) to satisfy identity requirements as quickly — and with as little custom code to write or maintain — as possible.

## Identity Enables Online Retail and eCommerce

Identity may not be top of mind for retailers, but the identity function is essential to helping eCommerce companies:

* **Maximize conversions and revenue** by[ minimizing friction in any and every customer interaction](https://auth0.com/resources/whitepapers/identity-insights-101)
* **Meet user expectations** by[ powering personalized experiences](https://auth0.com/case-studies/coles-group)
* **Manage risk** by addressing regulatory requirements and privacy laws and by addressing[ identity-specific security threats](https://auth0.com/resources/whitepapers/state-of-security-identity-report)

A customer identity and access management (CIAM) solution with the right set of out-of-the-box features can help engineering teams to avoid a whole lot of pain and expense.

For example,[ CIAM has been a core enabler of cosmetic giant Lush’s consumer-oriented initiatives](https://auth0.com/case-studies/lush-cs), powering a range of features including single sign-on (SSO) and guest checkout, as well as the centralization of the point-of-sale (POS) system for the entire business. In particular, extensive out-of-the-box functionality allowed Lush to implement these features with a limited developer team while ensuring the pace of transformation didn’t compromise customer privacy or system security.

While out-of-the-box functionality is important, the real world is a complex and dynamic beast (as anyone who’s ever done a year-over-year roadmap comparison understands). Being able to accommodate change and tailor identity to your unique needs — and doing both without drawing too heavily upon developers — is the difference between CIAM as a necessary component of your application stack and CIAM as an operational and competitive advantage.

![Auth0 Marketplace](https://images.ctfassets.net/23aumh6u8s0i/16QlWAA6ZN2lnMATb3RbMu/3e305e33068ab6a5afb1419500972b4c/Marketplace_Partner_Spotlight_Separator_V01B_3x.png)

## Actions Integrations and the Auth0 Marketplace

A modern CIAM solution can tackle the identity basics (e.g., signups, logins, account updates, password retrievals, etc.), but satisfying advanced use cases often requires transacting with other business systems and third parties to execute complex conditional flows.

Building such advanced logic from scratch is a major undertaking requiring specific skill sets, tools, and knowledge; worse still, it’s inefficient because each use case is a custom coding exercise with little that can be reused.

Alternatively, having a simple but effective (read: powerful, flexible, efficient, etc.) way to make identity work with your other business systems allows developers to quickly implement customized identity solutions without the time, expense, and headaches associated with custom coding projects… and that’s where[ extensibility](https://auth0.com/extensibility) comes into play.

Since launching in late 2020,[ the Auth0 Marketplace](https://marketplace.auth0.com/) has helped developers quickly find and install third-party identity solutions for their applications and APIs.

[Actions Integrations](https://auth0.com/blog/auth0-no-code-actions-integrations-now-available-in-beta/) makes it even easier to extend Auth0 with partner-built innovations, often with no-code, drag-and-drop ease; in fact, you can even ‘stack’ these integrations like building blocks to keep up with new needs and address advanced use cases.

To illustrate, let’s look at some examples…

## Prevent Fraudulent Registrations

One of the major objectives for consumer-facing companies is to convert prospects into first-time customers, and this makes fraudulent registrations (or signup fraud) especially problematic because:

* [Leveraging a customer data platform (CDP)](https://auth0.com/blog/why-you-should-integrate-customer-identity-and-your-customer-data-platform/), customer flows are often optimized based upon data that shows how users interact with a user interface and ultimately ‘convert’ — but fraudulent registrations pollute this data, significantly complicating business analytics activities.
* To maximize conversions, consumer businesses especially must minimize friction during the registration process — but lowering barriers for legitimate users also lowers the barriers for abusers.

While authentication (e.g., logging in with a username and password) shows that a user has the credentials that correspond to a particular account, it doesn’t prove that the user is who they say they are — that’s where[ identity proofing](https://auth0.com/blog/what-is-identity-proofing-and-why-does-it-matter/) comes in, by using additional verifications to create a high degree of confidence that your users are who they claim to be.

Here’s how a sign-up flow works when identity proofing is integrated:

* A new user clicks “sign up” on your website
* The sign-up flow calls upon[ the identity-proofing solution](https://marketplace.auth0.com/categories/identity-proofing)
* The identity proofing solution verifies the user’s identity using phone carrier verification
* Customer identity data is captured and collected by the[ CDP](https://marketplace.auth0.com/integrations/tealium)

By making signup fraud much more challenging to commit, identity proofing meaningfully alters the economics for bad actors and, in doing so, protects your customers, your reputation, and the integrity of the data stored in your CDP.

## Protect and Enrich Existing User Accounts

In addition to protecting against signup fraud, incorporating identity proofing into user workflows can also protect against account takeovers (ATO) and enrich user profiles with ‘golden data’ like age and demographic information.

For example:

* A returning user performs some action, like logging in or attempting to update account details
* Due to the perceived risk associated with the action (and perhaps incorporating other risk signals), the identity stack calls upon the identity-proofing solution as a safeguard
* The identity proofing solution validates the user’s identity, ensuring that the activity is not from a bad actor attempting to take over the account; or, if the user is accessing the service via a mobile app, a[ mobile verification integration](https://marketplace.auth0.com/integrations/incognia-authentication) validates the device ID to confirm the user’s identity
* With the user’s identity validated, the action is permitted, and the data associated with the user’s activity is sent to[ the CDP](https://marketplace.auth0.com/integrations/tealium) to build out the profile

Depending upon the risk signals or significance of the action, the identity-proofing solution may employ document scanning (e.g., passport, driver’s license) and cross-validation as the verification mechanism. When this is the case, the CDP can be enriched with information that may not yet be a part of the user’s profile.

![Auth0 Marketplace](https://images.ctfassets.net/23aumh6u8s0i/6U3nuyVYlbcg9i0C36khkU/61a068d638a5ee2753facbcf5924e55c/Marketplace_Partner_Spotlight_Separator_V01A_3x.png)

## Stop Fraudulent Checkouts

The previous examples involve sending data to the CDP, but the CDP data can also be leveraged within the identity flows. For instance, here’s how data from a CDP can combine with an identity-proofing solution to stop a fraudulent checkout:

* A threat actor masquerading as a user logs in, browses products and adds items to the cart
* The CDP collects and stores behavioral data from this session. The data can then be used to help determine that the risk threshold is exceeded — e.g., the total purchase amount exceeds the real customer’s typical habits, or the IP geo-location is outside the real customer’s region, etc.
* The threat actor fails the identity proofing verification, and the purchase is stopped, protecting the customer and the retail brand from the effects of fraudulent purchases

## Reward Your Loyal Customers

Retail brands can suffer reputational harm when resellers buy premium products (e.g., sneaker drops, limited edition collaborations, small batch cosmetics, etc.) only to mark up the price on a third-party marketplace.

By restricting who is able to purchase these products, retailers can reward loyal customers and protect their brand:

* A user logs in
* The CDP provides customer data that can then be used to indicate whether or not the user exceeds a certain ‘loyalty’ threshold (e.g., based on purchase history)
* If a user exceeds the threshold, then the site/service shows them premium offers
* The user adds a premium product to their cart and initiates the checkout
* Identity proofing validates the user’s identity to guard against an account takeover and ensure that the purchaser is a loyal customer

Additionally, the same building blocks can be used to encourage preferred channel adoption. For example, many retailers reserve limited edition products only for users of their mobile app. Web users could be presented with a message saying, “To see promotional offers, please switch to the app.” If the user’s device has already been verified in a past interaction, then the purchase can proceed; otherwise, the identity stack calls a short verification flow. 

Customer lifetime value is rooted in personalized offers, promotions, and pricing, which depend on rich customer profiles stored in CDPs. To build these profiles, brands collect customer data across various channels and systems, with the mobile app being perhaps the most valuable channel.

## A World of Extensions and Opportunities

Extensibility is a core Auth0 principle.[ Our identity platform](https://auth0.com/resources/videos/platform-introduction-video-2020) is designed to be easy to deploy and even easier to tailor to your unique business needs, so you never have to choose between customizability and ease of deployment.

We’re excited about the potential unlocked by the rich ecosystem of third-party integrations, as they allow our customers to continually add new capabilities as needed.

Whether you prefer the pro-code approach of[ Actions](https://auth0.com/docs/customize/actions) or the no-code convenience of Actions Integrations found within[ the Auth0 Marketplace](https://marketplace.auth0.com/), we encourage you to explore the options to see which of your identity and identity-related use cases already have a ready-built solution just waiting to be integrated!

Why Easy Extensibility is an Online Retail Essential

Learn about all the new integrations to hit our Marketplace.

Another month has passed, and we're continuing to grow our Marketplace. As our partners explore and discover more use cases for extending Auth0, they're continuing to build new, exciting integrations. What does this mean for you? You have growing options to choose from for building your custom identity experience with Auth0.  

See the exciting integrations our partners have built this month. 

![Marketplace](https://images.ctfassets.net/23aumh6u8s0i/6U3nuyVYlbcg9i0C36khkU/61a068d638a5ee2753facbcf5924e55c/Marketplace_Partner_Spotlight_Separator_V01A_3x.png)

![Anonomatic PII Vault](https://images.ctfassets.net/23aumh6u8s0i/3wzehJ7lrVjxkZeXhIwnp4/b3004392fc271c00356888b9270920ff/Anonomatic_PII_Vault.png)

## Anonomatic PII Vault
[**Anonomatic PII Vault**](https://marketplace.auth0.com/integrations/pii-vault-data-privacy-and-compliance) seeks to make data privacy secure, simple, and cost-effective. The Anonomatic integration on Auth0 allows you to store user profiles and any other PII in a specialized PII database, so you don't have to. Using restricted re-identification, PII Vault helps ensure users and processes only have access to the PII values they need. PII Vaults allows anyone who manages sensitive data to safely use, process, and share it, maximizing its value without the risk of exposing PII while meeting data privacy obligations. 

![Aserto Authorization](https://images.ctfassets.net/23aumh6u8s0i/2NP5PRRCGdhiDvZOcrfJb1/c4a7286dc8a40cc8821360584274dca0/Aserto_Authorization.png)

## Aserto Authorization
[**Aserto**](https://marketplace.auth0.com/integrations/aserto-authorization) makes it easy to implement fine-grained, real-time policy-based access control for cloud applications and APIs. The [Aserto integration](https://marketplace.auth0.com/integrations/aserto-authorization) with Auth0 helps determine whether a user is allowed to perform an operation on a particular resource. The authorizer is deployed in your cloud, offering low latency and high availability, while the control plane offers centralized management of authorization policies, user attributes, resource and relationship data, and decision logs. 

![Dentity Web3 Identity Platform](https://images.ctfassets.net/23aumh6u8s0i/5do73jdxwGewnXwa6kGGUe/874b15a60752d8b225785a01a1044197/Dentity_Web3_Identity_Platform.png)

## Dentity Web3 Identity Platform
[**Dentity**](https://marketplace.auth0.com/integrations/dentity-decentralized-identity) makes it easy for customers to build online trust, protect their privacy, and own their digital identity. The [Dentity Web3 Identity Platform](https://marketplace.auth0.com/integrations/dentity-decentralized-identity) offers consumers a no-cost way to create, share, and verify identity credentials, and businesses a new way to issue and verify Verifiable Credentials, increase consumer privacy, and attract and retain customers. This integration allows relying parties to verify credentials held by Dentity users using verifiable presentations consistent with the current standards and specifications in the industry.

![Dock Web3 ID](https://images.ctfassets.net/23aumh6u8s0i/2cE9egvrSF62gWaxmSOM5M/641283c130a62bbb1760fc2c2324a017/Dock_Web3_ID.png)

## Dock Web3 ID
The [**Dock Web3 ID**](https://marketplace.auth0.com/integrations/dock-web-3-id) integration is a blockchain-based authentication and authorization system for signing in with decentralized identifiers and verifiable credentials. Using the [Dock](https://www.dock.io/web3id) integration, developers can grant access and verify end-user eligibility by requesting private data from users' non-custodial identity wallet apps. This allows users to verify eligibility based on private data - like age, driver's license, or proof of NFT ownership - with cryptographically verifiable credentials.

![Marketplace](https://images.ctfassets.net/23aumh6u8s0i/16QlWAA6ZN2lnMATb3RbMu/3e305e33068ab6a5afb1419500972b4c/Marketplace_Partner_Spotlight_Separator_V01B_3x.png)

Make sure you check back next month for our partners' latest releases. In the meantime, check out our [Marketplace catalog](http://marketplace.auth0.com/) for the current list of partner integrations.

Interested in becoming an Auth0 ecosystem partner? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started.

Marketplace Partner Spotlight: What's new from July and August

Flexible streaming directly to your tools powered by Auth0 Marketplace integrations.

No matter industry or size, data collection and analysis can play a critical role in the success of your business. Without the right data or tools in place, it can be impossible to fully analyze performance and make the right user optimizations. The inability to monitor and react to security incidents can set organizations up for risk and brand consequences - [with the average cost of a data breach rising to $4.35 million in 2022.](https://www.ibm.com/security/data-breach) But while real-time data monitoring and alerting is important, it can be difficult to scale - especially if you’re not in the business of data ingestion. 

That’s where log streaming comes in. Log streaming allows you to ingest activity data and receive real-time monitoring and alerts, enabling you to react to security events, analyze performance, and understand user behaviors. We first introduced [Auth0’s log streaming integrations](https://marketplace.auth0.com/features/log-streaming) in 2020, allowing you to easily integrate log streaming into your applications to monitor and keep track of events occurring within your Auth0 tenants. For a bit of a deeper dive into log streaming and our past log streaming integrations, be sure to check out our [log streaming overview blog](https://auth0.com/blog/log-streaming--what-it-is-and-why-it-matters/). 

## Investing in Log Streaming to Enable Rapid Customer Response

[Account takeover attacks increased by approximately 90% from 2020 to 2021](https://www.forbes.com/sites/forbescommunicationscouncil/2022/07/18/the-account-takeover-epidemic-a-wake-up-call-for-chief-digital-officers/?sh=4eb245354196), adding pressure on IT admins to present better account monitoring and protection solutions for their users. Organizations need to be able to quickly see and react to abnormal events within their applications and find areas to improve efficiencies for better user experiences. 

We’ve been offering both log streaming and log extensions as a monitoring solution, but as pressures to react and respond to real-time streaming data grows, we’ve decided to [move away from log extensions](https://community.auth0.com/t/log-extension-deprecation/83017) and fully invest in log streaming. Log extensions delivered a once-viable solution, but we’ve found them difficult to scale to meet the growing needs. By refocusing our efforts, we’re able to launch custom log streaming solutions that are not bound by global management API endpoint limits and rate limits and, ultimately, deliver scalability. For users, this allows you to better react to real-time monitoring and alerts, analyze application performance, and understand your customer behaviors with real-time activity data. 

## Log Streaming Flexibility: Connect Directly to Your Third-Party Data Tools

We’re excited about our new launches for a few reasons. We’ve created a more efficient solution to export log events to your third-party data tools. By shifting our focus to only log streaming, we can continue to enhance our log stream features to make them more customizable for unique use cases. 

A feature we recently implemented, Log Streaming Flexibility, allows users to select which log-type categories they want to stream. This means that instead of filtering the data you want to see at the end of the stream, you can now filter exactly what you want to see directly at the source. The result is better-defined log streams that only send relevant data and easier adoption of log streams with less volume to manage. This functionality also serves as one of the alternatives to the soon-to-be deprecated log extensions functionality. 

## Meet Our Log Streaming Partners

As we continue to fully invest in log streaming, we’ve partnered with Mixpanel and Segment to create custom log streaming integrations built on APIs for two-way communication between applications.

#### [Segment](https://marketplace.auth0.com/integrations/segment-log-streaming)

Built by Auth0, the Twilio Segment integration is a Customer Data Platform (CDP) log streaming solution that provides companies with the data foundation to help build complete customer profiles. Twilio Segment allows companies to collect, unify, and route customer data into any system to better understand their customers and create seamless, compelling experiences in real time. 

#### [Mixpanel](https://marketplace.auth0.com/integrations/mixpanel-log-streaming)
The Mixpanel integration gets engineering, product, and data teams the tools they need by providing fast, flexible, and easy-to-use product analytics. This custom log streaming integration allows you to create behavioral cohorts that can be routed to Mixpanel to create robust data profiles. Mixpanel’s reporting makes it easy to find root causes of user drop-off and growth in order to better serve your customers. 

In addition to the above custom log streaming integrations built in collaboration with Mixpanel and Segment, some of our other partners have launched log streaming integrations in the [Auth0 Marketplace](http://marketplace.auth0.com/). These partner-built integrations are built with custom webhooks to allow you to ingest and track event data within your Auth0 tenants. 

#### [Elastic](https://marketplace.auth0.com/integrations/elastic-security)
[Elastic Security](https://www.elastic.co/security) combines SIEM threat detection features with endpoint prevention and response capabilities in one solution. The Elastic Security log streaming integration for Auth0 uses custom webhooks to enable easy ingestion of Auth0 events to aid with threat detection and incident response. All Auth0 events are mapped to the Elastic Common Schema, allowing you to easily analyze, correlate, and visualize events right away.

#### [Logz.io](https://marketplace.auth0.com/integrations/logz-io)
The [Logz.io](https://logz.io/) Cloud SIEM integration for Auth0 allows you to centrally monitor your workflow logs to help rapidly identify, investigate, and remediate emerging threats. Combining the open-source visualization from Kibana with advanced security analytics backed by AI and Machine Learning, Logz.io enables you to inspect and investigate all of your relevant Auth0 event data. Using custom webhooks, Logz.io allows your team to quickly drill down into granular user data while inferring critical security intelligence to inform decision-making.

#### [MDR ONE](https://marketplace.auth0.com/integrations/mdr-one)
[Kudelski Security’s](https://kudelskisecurity.com/services/mdr-one/) MDR ONE integration uses an advanced set of detection rules to provide widely recognized threat hunting, detection, and response capabilities for Auth0. By offering a unique combination of consulting, technology, and managed services, the MDR ONE integration enables organizations to continuously evaluate security posture and recommends solutions that will address business risk and compliance needs and assist with overall security effectiveness.

## What’s Next for Log Streaming on Auth0?

We’re just at the beginning of our custom log streaming integrations. With the launch of our Auth0-built integrations, we’ll soon be opening up the opportunity for partners to build their own custom log streaming integrations on our Marketplace, in addition to the webhooks-based integrations our partners are already building. 

As we move away from extensions entirely, be on the lookout in the coming months for documentation and announcements on this opportunity, and be sure to check out [auth0.com/integrate](https://auth0.com/integrate) to learn more about the process of building and launching an integration on the [Marketplace](http://marketplace.auth0.com/).



Custom Log Streaming Integrations

Dan McCorriston

Senior Product Marketing Manager

Now, all Auth0 customers - including those on our private cloud platform - have access to all the offerings on the Auth0 Marketplace.

Auth0 is excited to announce a newly expanded offering for [our new private cloud platform](https://auth0.com/blog/a-technical-primer-of-auth0-s-new-private-cloud-platform/) customers - Actions Integrations are now available from the Auth0 Marketplace. What that means is all Auth0 customers that utilize our new private cloud platform have access to all the offerings on the Auth0 Marketplace - SSO, Social Connections, Log Streaming Integrations, and now, Actions Integrations.

Actions Integrations will start to appear in the Development/Staging space now and will be ready in the Production environment in the coming weeks dependent on various release cadences.

### What are Actions Integrations and the Auth0 Marketplace, and why should I care?

At Auth0, we realize that many customers have unique needs, and as a result, they want the ability to customize their identity product. In order to serve these additional customer needs, Auth0 built a variety of tools to extend the functionality of identity. This concept is called **extensibility.**

Auth0 Actions and Actions Integrations is the next generation of **extensibility**. Actions is the low-code offering, and Actions Integrations allows customers to use pre-written no-code, drag and drop options to add other functionality such as ID proofing and consent management. Auth0 provides this additional functionality through integrations with **our Ecosystem partners** offered in the Marketplace.

The Auth0 Marketplace and Auth0 Actions are the two complementary ways we extend Auth0. Customers and their end users need the ability to resolve their unique identity requirements — which may include payments, subscription management, signing terms of services, etc. — to complete a successful user access journey into their application or service.

### What is Private Cloud?

Auth0’s [Private Cloud offering](https://auth0.com/cloud) provides the flexibility and agility offered by cloud deployments but also allows a customer to maintain the control and security they need to protect their customers and their businesses. Many customers that have high security and regulatory concerns - those in the financial services industry, for example - may require certain standards of uptimes, updates, failovers, and support for their deployments. The Auth0 Private Cloud deployment models come in both Standard and Managed levels, depending on the customer’s requirements.

Auth0 [recently invested in retooling the Private Cloud platform](https://auth0.com/blog/a-technical-primer-of-auth0-s-new-private-cloud-platform/) to support more automation, adopt current technologies and help scale the Private Cloud to thousands of environments.

### Benefit of Private Cloud and Actions Integrations

Private Cloud has a strong appeal for customers who have high volume or who are from certain verticals. For example, verticals like banking, where shared databases are a concern. Or customers who have data residency requirements or even those who prefer to deploy in a specific region close to their customers. Private Cloud customers do not have to be concerned with sharing space, public cloud request limits, and multiple customer’s data being present in the same deployment. 

Many of the same customers that have a need for Private Cloud also have extensive use cases for extensibility and the no-code integrations available in the Auth0 Marketplace. Easy-to-use integrations such as Identity Proofing and Customer Data Management. With Actions Integrations, developers no longer need to build or maintain custom code or make changes when we alter programming models or release new versions of Node. These Actions Integrations are built and maintained by our Ecosystem partners and are available right in the Auth0 Marketplace. 

A couple of examples of Actions Integrations available in the Auth0 Marketplace:

* [**Deduce Intelligent MFA**](https://marketplace.auth0.com/integrations/deduce-intelligent-mfa): Deduce prevents consumer-facing Account Takeover (ATO) and registration fraud via the constantly growing Deduce Identity Network, with over 400M profiles and in excess of 1.2B daily activities. Deduce risk signals significantly reduces false positive MFA challenges.
* [**Tealium User Login**](https://marketplace.auth0.com/integrations/tealium): Tealium connects customer data - web, mobile, offline, Internet of Things (IoT) - so brands can connect with their customers. Tealium empowers companies to create a unified, real-time customer data infrastructure and makes customer data more valuable, actionable, and secure.

### Is this an increased opportunity for Ecosystem Partners?

Now that Private Cloud customers have access to Actions Integrations in the Auth0 Marketplace, our Ecosystem Partners have a new and expanded pool of potential customers to reach through building and publishing Actions Integrations into the Marketplace. There’s never been a better time to become an Ecosystem Partner and market your Actions Integrations through the Auth0 Marketplace.

Make sure to visit the [Auth0 Marketplace](https://marketplace.auth0.com/) to see if there is an integration that optimizes your customer’s identity experience. To find out more about becoming a [Private Cloud](https://auth0.com/docs/deploy-monitor/deploy-private-cloud) customer, please [send an inquiry](https://auth0.com/get-started?place=documentation%20post&type=link&text=contact%20auth0%20sales) and someone from Auth0 will contact you about whether it’s a good fit for your business.

Actions Integrations Now Available in Private Cloud

Nathan Chan

Nathan is a Sr. Solutions Engineer at Okta connecting the dots between technology and GSI partners. When not working, he is an avid fan of the New York Yankees.

Senior Solutions Engineer

Auth0 Actions and Integrations can combine to increase security and improve visibility

**TL;DR:** Last-mile customization can transform an out-of-the-box solid solution into the one you need for your business right now. But did you know that the same extensibility (the ability to write custom authentication workflows and integrate no-code third-party applications) can be used to increase security? You can use extensibility to create a layered defense. This post will show you how.

## Why You Should Build In Security

According to [the 2022 Verizon Data Breach Investigation Report (DBIR)](https://www.verizon.com/business/resources/reports/dbir/), 82% of security incidents involved a human element. Threat actors overwhelmingly rely upon social engineering and phishing attacks, not to mention simple everyday errors, in their quest to plunder company data. And so, identity is now the first line of defense. 

Identity plays a massive role in security. Customer Identity Access Management (CIAM) solutions like Auth0 are designed to strengthen your defensive posture with out-of-the-box security features, like the ability to detect brute force attacks and warn users when their credentials have been leaked. 

These features address the security needs of many companies. But no two businesses are the same. Some, particularly those in highly-regulated markets, need even higher levels of vigilance. Their threat profile requires them to introduce additional friction into the authentication process beyond what their CIAM platform offers by default. 

Auth0 makes it easy to add that protection. Because it's designed for extensibility, users can build custom functionality or create custom workflows by writing their own Actions or installing no-code integrations from the Auth0 Marketplace. In turn, businesses can create a robust, layered defense, allowing them to meet their own security needs.

This post will focus on the concept of a layered defense. We'll explain it on a high level and then look at the practical side of things. You'll learn how Auth0's extensibility features allow for the custom authentication workflows and rules that are fundamental to a layered defense. 


## What is a Layered Defense?

It's often useful to describe technical concepts with a real-world metaphor. Let's imagine you just bought a new house. It's beautiful. Your dream home, even. But there's a catch. It's a big one. As you unloaded your possessions from the moving truck, your new neighbor warned you about a recent spate of break-ins. You want to keep your family safe, so you begin adding new security features. 

Fortunately, the front door is made of thick, solid wood. Your windows are the strong double-glazed kind. And so, you look elsewhere to make changes. 

With boxes piled around your feet, you begin to install locks on your internal doors. A video doorbell and CCTV cameras come next. You deploy motion detectors around the ground-floor windows and even start thinking seriously about buying a dog. With each new security feature, your home becomes more resistant to burglars. You started from a good place, thanks to your solid wood doors and double-glazed windows. But you know that no security system is invulnerable. And so, you built upon those strong beginnings. 

In a business technology context, a layered defense involves taking the strong underpinnings of a product and enhancing them further. No security product is perfect. Risk levels vary between businesses, and some may be enticing enough to convince an attacker to systematically test your defenses in the hope of finding a weakness they can exploit.

As you add additional layers of security, introducing new surveillance and mitigation measures, you reduce the likelihood of an attacker finding a loophole. You introduce redundancies. If an attacker circumvents one protection, they're blocked by another. 

Let's return to the home example. Suppose a burglar smashes their way through your sturdy, double-glazed windows. They must still face the motion detection sensors, the CCTV system, and the dog. Their odds of successfully robbing your home while remaining undetected are still vanishingly thin. 


## Protect The Gateway, Protect the Application 

Risk varies wildly between industries. But it's also contextual. 

A logistics company might want to re-authenticate users when they perform a potentially-unauthorized action — like changing the delivery address of a package whilst it's in transit. Banks often will challenge users when they add a new payee or send a wire transfer to a new account. Many applications add friction when they detect suspicious behavior, like when a user logs in from a new location or from a new previously-unseen device.

There's a reason for this. Identity is the most logical place to add extra protections. It's a necessary component for accessing an application. It's the part responsible for session management. Identity is how you can block and revoke access.

CIAM tools like Auth0 make this process even easier, as they're inherently centralized. There's one place to look for suspicious login activity and one place to act. If you rely on a custom identity system, which in turn relies on several external components, it becomes a lot harder to take swift action against the potentially-harmful activity and even more time-consuming to add new security features. 

If you're curious, we've explored this issue at length in the past. On so many levels — but especially security — it makes more sense to [use a purpose-built CIAM tool over an in-house identity system](https://auth0.com/resources/whitepapers/build-vs-buy-evaluating-identity-management). For a deeper look into the build-vs-buy debate, check out [this white paper](https://auth0.com/resources/whitepapers/build-vs-buy-evaluating-identity-management).

Okta provides low-code and pro-code tools to build a robust, multi-layered, and context-aware defense. We also make it really easy. Read on to learn more about Auth0 Actions and Integrations and how they can combine to bolster your security posture.


## How Actions Power Your Layered Defense

Actions are small, tenant-specific scripts written for the Node.js framework that execute at specific points during the authentication workflow. They're a quick, effective, and versatile way to add custom functionality to the stock Auth0 platform. 

The Auth0 platform defines several contexts where an Action can be executed. We call these flows. Put simply; flows describe linear user interactions within an authentication context. Things like changing a password, creating a new user account, or logging in. 

Flows define the broader authentication and access control pipeline. They represent a linear user or machine interactions within an authentication. Examples include account creation, password changes, or logging in.

Within flows, you'll find something called 'triggers.' These identify specific parts of the pipeline where you can introduce custom business logic.

Flows are either blocking (synchronous) or non-blocking (asynchronous), depending on the context. In practice, the vast majority of the Actions-based layered defense measures will be blocked as you halt the authentication process until a specific condition is met. 

For a good example of this, look at the login flow. It's here you'll check the location or IP range of the user or ask them to verify their identity with multi-factor authentication (MFA).


## Putting Code First

The Auth0 platform treats code like a first-class citizen. In practice, this means we deliver a modern developer experience and try to limit the number of restrictions placed on customer Actions. 

Because Actions are proper node.js applications, they can use the majority of third-party libraries available within the public NPM registry, provided they don't rely on any native add-ons. In short, if a dependency doesn't require you to compile anything, it'll likely work. We support two ways of adding dependencies to an Action: through our web interface or via the Auth0 Management API. 

Developers can build Actions using their preferred text editor (Vim or Emacs, we don't judge). We also provide a browser-based editor with native syntax highlighting. And, because version control is at the heart of good software development, the Auth0 platform allows you to track changes over time and quickly revert to the last known good version of an Action. 

We designed Actions to be easy to test, debug, and audit throughout the entire lifecycle. Using the browser-based editor (or the Auth0 Management API), developers can test their actions using dummy payloads. This feature simulates real-world usage without the need to deploy the action to a live environment. 

The Auth0 platform also lets developers test the more granular elements of their application. Developers can run unit tests using the framework of their choice. Our documentation primarily focuses on Jest, the most popular JavaScript unit testing tool. This makes it easy to verify the bits of your code that don't primarily interact with the Auth0 platform, like custom logic that posts a Slack notification when a user fails to authenticate. 

Once an action is live, administrators and developers have access to tenant logs, allowing them to easily identify and debug failed interactions. Logs are hugely valuable from a security perspective. They act as the canary in the coal mine, warning when a third party is attempting to gain unauthorized access and providing valuable intelligence when investigating a security incident. 

But logs can also provide useful clues with respect to your application's usability and stability. We record failed sign-ups and machine-to-machine messages, along with the other typical user interactions, to provide engineers with vital diagnostic information. 


## The Rules for Writing Actions

In short, Actions are a really powerful way to introduce custom business logic to your identity. That said, to make sure everyone can take advantage of them, we have a few basic rules. 

We limit Actions to ten external dependencies, and each action should be no more than 100kb in size. This size limit excludes any external NPM modules. Additionally, each flow cannot exceed more than 20 attached actions. 

These rules are intended to ensure your users have a smooth experience. That's because larger, more complicated scripts add latency to your application. We, therefore, require every flow to complete in under ten seconds. Flows that exceed this limit are executed and will return an error.

Additionally, each Auth0 tenant is limited to a maximum of 100 actions. This number includes both deployed and undeployed actions. We also limit the number of versions to 50 per action. Should you exceed this figure, Auth0 will automatically delete the oldest available version. For more information, check out our guidelines.

Remember: Actions are designed to be small, purpose-built scripts. As any software engineer can (and will) tell you, simplicity is always better than complexity.


## A Look at Integrations

We've already introduced Actions. They're great for adding custom business logic to identity workflows. But what if you don't want to reinvent the wheel? Fortunately, Auth0 has a solution for that, allowing you to incorporate third-party services while limiting the need for custom code. 

Integrations are ready-to-use extensions that allow you to integrate third-party applications and services into your identity workflows. 

Let's put it another way. As a developer, you use libraries to work more effectively. These pre-written packages of code allow you to focus on building value. Libraries solve problems that millions of programmers face — like interfacing with databases, generating data visualizations, or sending emails and texts to customers. 

Integrations work the same way. They solve problems that you, and countless other engineers, face. Problems like how to share access logs with Splunk or Sumo Logic or how to verify identity documents and passwords. Like a programming library, Integrations are ready to use and, in many cases, can be implemented with just a click. 

You can find and install integrations from the Auth0 Marketplace. Each comes with helpful guidance on how to activate them within your tenant and the best practices for use. If you get stuck, you can find more information on our documentation page. 


## Building a Layered Defense Strategy with Actions

Okay, so we've explained what a Layered Defense strategy means and learned how to customize identity workflows within Auth0. Now let's look at some scenarios for how this could work in practice. 

The stock Auth0 experience comes with several security features by default. It automatically blocks suspected brute force attacks, as well as suspected bot activity. It warns users when their passwords appear on the dark web. It makes it easy to add features like multi-factor authentication (MFA), including biometric-based MFA.

Like the house in the earlier metaphor, Auth0 offers strong foundations to build upon. But what if you wanted to expand further?

A good start would be to require MFA for all users accessing your application beyond the confines of the company network. You also decide to block login attempts from specific countries where your business doesn't have a presence and are often the source of attempted attacks. After writing a few lines of code, you have an action that's ready and waiting to be attached to the login flow. 

You also decide to limit the potential window when a successful attack could occur by blocking authentication attempts that take place overnight. Again, this can be accomplished with just a few lines of code.

Context matters. It's the thing that lets you distinguish between legitimate and malicious activity. It's the tool that lets you evaluate risk. Just like a bank may temporarily block your debit card if you withdraw cash from a country you've never visited before, a layered defense strategy allows you to add friction based on the criteria that you define.

And because Auth0 Actions are JavaScript applications, you have the flexibility to define the circumstances where you may wish to add friction or even deny access. 


## Bringing Integrations Into the Mix

Auth0 is one of many security tools your business relies on. You use a SIEM platform to manage, retain, and analyze logs. As your application is built with a microservices architecture, you rely upon a gateway to manage API requests and identify malicious activity. You use a mobile device management (MDM) system to keep track of company-issued laptops and smartphones. 

Naturally, you want to integrate these tools into your identity platform. And so, you head to the Auth0 marketplace. With just a few clicks, the security tools you use are working together in harmony. 

And, because Auth0 allows you to customize most parts of the identity lifecycle, from registration to authentication, developers quickly add additional functionality and quickly onboard new third-party products and services. For example, they could implement sophisticated behaviors that minimize the risk of fraudulent or malicious account creation. 

We make it easy to integrate your application with tools like Deduce, a behavioral intelligence platform that detects suspicious user activity in real-time. And, with a few lines of code, developers can redirect flagged accounts to services like ID DataWeb, where users are asked to prove their identity with their passport or driving license.

With each step, you add another layer to your defensive posture. You become stronger. More resilient. Better able to withstand threats. Less attractive to a would-be attacker. 


## You Know Your Risk Best

Don't get us wrong — Auth0 is designed to deliver the best security outcomes from Day One. Its [out-of-the-box security features](https://auth0.com/blog/how-auth0-makes-your-apps-more-secure/) can protect against brute force and credential stuffing attacks, and we actively monitor for suspicious or anomalous behaviors. 

But we also know that every company is different, with different risks and compliance requirements. And so, we make it easy to customize the included security features and add new functionality and friction beyond that. Flexibility goes hand-in-hand with security. Only you know the risks you face and the measures you need to take in order to protect your application, your data, and your users. 

Want to keep the conversation going? [Reach out to our team](https://auth0.com/contact-us) to learn more about how Actions and our network of integrations can help secure your business while delivering an unbeatable user experience for your customers and employees.

How To Build A Layered Defense By Extending Auth0

See all the exciting integrations our ecosystem partners are building

We’re excited to continue adding new partner integrations to our Marketplace. Our catalog is continuing to grow, meaning you have more options to choose from for integrating with Auth0. Our partners are continuing to discover and explore opportunities to build and solve a growing list of use cases and scenarios.

Check out the latest to hit our Marketplace this month. 

![DataGrail](https://images.ctfassets.net/23aumh6u8s0i/1bBFkW3AgNb2IFDYnCiwB5/05578365948862ca866434fb0635ab83/01_DataGrail.png)

## DataGrail
**[DataGrail](https://www.datagrail.io/)** is a privacy management platform for building consumer trust and eliminating risky business. The DataGrail integration enables continuous data discovery, automated data subject requests, and unified preference management, making it easier for brands to automate and scale their privacy programs. Using the integration, data stored in Auth0 can be acted on to quickly process DSRs (access, deletion, and do-not-sell requests) and comply with global privacy regulations like GDPR, CCPA, and CPRA. 

![Iuncta](https://images.ctfassets.net/23aumh6u8s0i/6SeszEUG2Z4nNf06fTvyGg/a0a3c6b14389f273eeab8b3b333587dc/02_Iuncta.png)

## Iuncta
**[Iuncta](https://iuncta.io/)** is a privacy-first social login that gives users more control over the access and sharing of their profile data. Its decentralized identity implementation allows users to act as their own identity provider online, which introduces a more transparent profile data sharing model. With its hybrid architecture, users can quickly and easily offer an enterprise-grade password-less authentication solution with an intuitive consumer-ready experience supported by the mobile app. The Iuncta platform enables user identity on demand, which streamlines onboarding and facilitates effortless digital interactions between users and integration partners. 

![MDR ONE](https://images.ctfassets.net/23aumh6u8s0i/7tWp2TgVztBTmeyQlJYKKw/30738b78ecf9a810386452f03687c284/03_MDR_ONE.png)

## MDR ONE
[Kudelski Security’s](https://kudelskisecurity.com/services/mdr-one/) **[MDR ONE](https://marketplace.auth0.com/integrations/mdr-one)** integration uses an advanced set of detection rules to provide widely recognized threat hunting and detection and response capabilities for Auth0. Kudelski Security is a global provider of tailored cybersecurity solutions for large enterprise and public sector clients. By offering a unique combination of consulting, technology, and managed services, the MDR ONE integration enables organizations to continuously evaluate security posture and recommends solutions that reduce business risk, maintain compliance, and increase overall security effectiveness.

![Snow Atlas](https://images.ctfassets.net/23aumh6u8s0i/6WiPsDji9U58nKxQUrl4Bu/21166544a6ab0ac5dcada099052c04a6/04_Snow_Atlas.png)

## Snow Atlas
The **[Snow Atlas](https://marketplace.auth0.com/integrations/snow-software-snow-atlas-sso)** integration—the technology intelligence platform from Snow Software—provides comprehensive visibility and contextual insight across software, SaaS, hardware, and cloud. The Snow Atlas SSO integration enables customers to sign in using Auth0 for single sign-on. For Snow Atlas customers, enabling single sign-on is as easy as adding Auth0 to their tenant and entering credentials, with the option to configure additional items such as organizational restrictions and automatic user provisioning.

![Web3Auth](https://images.ctfassets.net/23aumh6u8s0i/6QVaPFNZhamiPtICV1AwOr/1dcf279df66357e2b8eb9f34467dbe12/05_Web3Auth.png)

## Web3Auth
The **[Web3Auth](https://marketplace.auth0.com/integrations/web3auth)** integration on Auth0 allows organizations to provide and connect their users with self-custodial wallets, enabling applications to connect to any blockchain. Customers can use existing Auth0 login flows in a self-customizable manner, with no need for seed phrases or directly interfacing with vulnerable public-private key pairs. Web3Auth allows existing crypto-native users to connect or use their key management of choice. 

![WunderGraph](https://images.ctfassets.net/23aumh6u8s0i/1M6e9O4u8GgLd8xRFe8ZFI/bfdbf34181dd86ba94185c76d7f2f8b3/06_WunderGraph.png)

## WunderGraph
**[WunderGraph](https://marketplace.auth0.com/integrations/wundergraph)**, a secure developer-focused framework, provides a single solution for application integrations. The WunderGraph integration on Auth0 allows organizations to quickly integrate services, databases, and third-party APIs into a secure, unified, and extensible API using a declarative approach. WunderGraph is open source and built upon standards like GraphQL, OpenAPI, OAuth2, and S3. The integration standardizes the way how authentication, authorization, caching, and more are applied to applications.

![YooniK SSO - Face Login](https://images.ctfassets.net/23aumh6u8s0i/KzZUbBntqmG1PsUeZH04B/14d1f4b8e0bd7cd2dc5914a803a0d3f6/07_YooniK_SSO.png)

## YooniK SSO - Face Login
**[YooniK SSO - Face Login](https://marketplace.auth0.com/integrations/yoonik-yooni-k-sso-face-login)** SSO login simplifies customer interactions with secure, passwordless authentication. With this integration, after users log in to an identity provider, they are prompted to grant specific data access to the application, and an ID token with that user information is generated and sent to the application. This simple and secure authentication allows users to register once and access services anywhere, using facial login rather than passwords. 

We’ll be back next month with our latest releases. In the meantime, check out our [Marketplace catalog](http://marketplace.auth0.com/) for the current list of partner integrations and see who launched in Marketplace last month. 

Interested in becoming an Auth0 ecosystem partner? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started. 

Marketplace Partner Spotlight: What’s New from June and July

See all the awesome integrations our ecosystem partners are building

Our [Marketplace](http://marketplace.auth0.com/) ecosystem is continuing to grow. Over the past couple of months, we’ve been showcasing partner integrations from early 2022 and into the spring. We’re excited to announce that our catalog is only getting better and better as more partners are discovering new use cases and opportunities for integrating with Auth0. 

Check out the latest releases from our Marketplace partners: 

![AE](https://images.ctfassets.net/23aumh6u8s0i/ZUsuJvUmSmCpfNOtLyc2u/23724e8ac513a24fad9f331b7c8cbc1c/01_AE.png)

## AE

**[AE - Idence Access Management](https://marketplace.auth0.com/integrations/idence-access-management)** <br>
The [Idence](https://www.ae.be/idence) integration enriches Auth0 with a brandable, user-friendly portal and customizable workflows through which you can delegate access management to admin users of your B2B partners and customers. Idence makes it easy for admins to onboard and manage the identities and access of their colleagues on your platform. This integration greatly reduces the time and technical complexity of managing access policies for your customer’s users.

![Tealium](https://images.ctfassets.net/23aumh6u8s0i/5bMcDi56pRkrCHwPZ7X8qk/44d837edc0f9e4c7cdfdf0e11abf3df9/02_Tealium.png)

## Tealium

**[Tealium - User Login](https://marketplace.auth0.com/integrations/tealium)** <br>
The [Tealium](https://tealium.com/) customer data platform (CDP) integration connects customer data across the web, mobile, offline, and IoT sources so businesses can better connect with their customers. Tealium creates customer profiles as the foundation of an organization's personalized customer experience. This integration ingests onboarding and login information into the cross-channel Tealium customer profiles for activation. This enables data from Auth0 to be used for customer segmentation and experience rules for engaging customers to drive conversion.

![Netlok](https://images.ctfassets.net/23aumh6u8s0i/4idXQnmvztqbrPLjVHgwBs/35ff87447dd1400f5dc9927bfaddeba6/03_Photolok.png)

## Netlok

**[Netlok - Photolok MFA Login](https://marketplace.auth0.com/integrations/photolok-mfa-login)** <br>
Photolok is a passwordless MFA login that uses secure photos for IAM. In creating the Photolok integration, [Netlok](https://netlok.com/) sought to simplify the login process while providing enhanced security. Photolock eliminates passwords, password rules, and resetting, instead of letting users label a photo for IAM and save it to their profile within seconds. For extra security, photos can be labeled for one-time use and for duress, which acts as a silent alarm to designated IT and security teams when a user is forced to enter their device. 

![Cymatic](https://images.ctfassets.net/23aumh6u8s0i/7qcYanQHkYXsCvbhxnDyfg/5f10770073d8a877a4d03cb18fa07fd2/04_Cymatic.png)

## Cymatic

**[Cymatic - User Risk Analytics](https://marketplace.auth0.com/integrations/cymatic-user-risk-analytics)** <br>
The new [Cymatic](https://cymatic.io/) integration on the Auth0 Marketplace provides organizations with a way to seamlessly understand login risk — without affecting the consumer experience. With Cymatic, you can quickly understand which users put your organization at risk and mitigate ATO before it begins. By adding rich and informative user risk insights and analytics to your Auth0 workflow, you can get a detailed picture of your users’ security hygiene and your organization’s potential risk exposure across logins, sessions, devices, locations, user behaviors, and credentials. 

![443ID](https://images.ctfassets.net/23aumh6u8s0i/6Uli6249QWM2tEY9hT3yor/ba9848e0320ff25b415c691d6845d2c1/05_443ID.png)

## 443ID

**[443ID - Risk Scoring](https://marketplace.auth0.com/integrations/443-id-risk)** <br>
The new [443ID](https://443id.com/) Actions Integration allows you to add OSINT risk to your authentication flows without having to write a single line of code. Using the 443ID integration, you can pair your risk signals with 443ID’s diverse set of OSINT risk signals into your authentication flow right from your Auth0 console. These risk scores let you deny authentication based on risk level or determine when or how a user must MFA. Collecting these risk scores over time allows you to build a unique SignalPrint™, which can be used to recognize and verify legitimate identities while limiting the need for expensive KYC or captchas.

![Kong](https://images.ctfassets.net/23aumh6u8s0i/5xATH8UPcuvZNXN6avTG44/91bc1b418d46930cd80327ed1f57c2ab/06_Kong.png)

## Kong 

**[Kong - API Gateway](https://marketplace.auth0.com/integrations/kong-api-gateway)** <br>
[Kong](https://konghq.com/) provides full lifecycle API management to design, test, and document APIs and microservices, connect services across any infrastructure and automate the API lifecycle. The new Kong integration on the Auth0 Marketplace delivers a customer identity and API management solution based on OpenID Connect (OIDC) standards. Both Kong and Auth0 fully support OIDC and provide seamless integration to implement all flows and grants defined in the standard to give flexibility to the authentication and authorization processes.

Make sure you check each month as we announce the latest releases from our partners. In the meantime, explore our [Marketplace catalog](http://marketplace.auth0.com/) for the current list of partner integrations, and be sure to check out the [last month’s integrations](https://auth0.com/blog/marketplace-partner-spotlight-what-s-new-from-february-and-march/) as well. 

Interested in becoming an Auth0 ecosystem partner? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started.

Marketplace Partner Spotlight: What’s New from May and June

Check out the latest integrations our ecosystem partners are building

With extensibility at the core of our platform, it's no surprise that our partners are discovering endless opportunities for integrations to help our joint customers customize their solutions. Through the [Auth0 Marketplace](http://marketplace.auth0.com/), we've made it easy for you to explore partner integrations that will allow you to extend and customize your Auth0 solution. 

Our list of partners continues to grow, and we're excited to announce some of the most recent integrations to hit our marketplace: 

![Deduce](https://images.ctfassets.net/23aumh6u8s0i/3bt2DmuOaG27pzb33Cvxh1/c782a53b76a835b0e7170f690ec66007/1_Deduce.png)

## Deduce

**[Deduce - Intelligence MFA](https://marketplace.auth0.com/integrations/deduce-intelligent-mfa)** <br>
The [Deduce](https://www.deduce.com/) Intelligent MFA integration acts as a first line of defense against consumer-facing Account Takeover (ATO) and registration fraud. Inform every authentication, account creation, and password reset with identity-backed behavioral intelligence powered by the Deduce Identity Network. The Deduce Identity Network is a consortium of over 150,000 websites and applications that delivers a comprehensive range of both risk and trust signals that help stop fraud, and reduce false-positive challenges, via a no-code integration with Auth0.

![Haventec](https://images.ctfassets.net/23aumh6u8s0i/5KFFwBrRD6DFfNwEsoIW51/a729ba1993027bd10939384310cb179e/2_Haventec.png)

## Haventec

**[Haventec - Single-step passwordless multi-factor authentication](https://marketplace.auth0.com/integrations/haventec-authenticate)** <br>
The [Haventec](https://www.haventec.com/) Authenticate integration is a decentralized identity provider that enables a single-step passwordless multi-factor authentication experience and reduces the risk of credential theft. Single-step passwordless MFA is invisible to the user, does not require switching devices or applications for a second authentication factor, and provides a seamless and consistent experience across all digital channels. Once enabled, the Haventec Authenticate integration can provide single-step passwordless MFA for any application registered with Auth0.

![Elastic](https://images.ctfassets.net/23aumh6u8s0i/3bnzTWy2aUCmcP04rOf1Vq/43cdcb135e8035a44e2d8c61a6860a0a/3_Elastic.png)

## Elastic

**[Elastic - Event ingestion and log streaming](https://marketplace.auth0.com/integrations/elastic-security)** <br>
[Elastic](https://www.elastic.co/) Security enables security teams to stop threats quickly and at scale, with a platform for prevention, detection, and response. The newly launched Elastic Security integration in the Auth0 Marketplace enables the collection, analysis, and correlation of Auth0 events and alerts, leveraging Elastic to ingest events from Auth0's log streaming service. With this integration, Auth0 events can be searched and visualized with predefined mappings, detection rules, and dashboards to aid with threat detection and incident response. 

![Trust Swiftly](https://images.ctfassets.net/23aumh6u8s0i/4yilZ4nXdxZoSZmdWcFXoY/dba6176c1951d8f5f29870f7be8fa3c9/4_Trust_Swiftly.png)

## Trust Swiftly

**[Trust Swiftly - Flexible, secure identity verification](https://marketplace.auth0.com/integrations/trust-swiftly-identity-verification)** <br>
The new [Trust Swiftly](https://urldefense.com/v3/__https://trustswiftly.com/__;!!PwKahg!_cpZ3DY8Ufr8f21at6zHQ5ztKuEEyW9K8YQRrC11gTaCOansr9C1oBhSnRnvXRoEyHIjOPTm8GrceA4bXLT6zsc$) integration in the Auth0 Marketplace provides an adaptive identity proofing platform with over 15 ways to verify user identities. The integration dynamically verifies Auth0 logins and sign-ups with minimal friction for the end user. Example identity verification checks include government-issued IDs, utility statements, video, banking, geolocation, voice, and credit card authorizations. The integration offers configurable settings to support multiple use cases and meet unique verification requirements.

![Spruce ID](https://images.ctfassets.net/23aumh6u8s0i/1H2npZohsE2NF8UQps7BkI/b291f5098d2fd1e4c1ee49407fb019e1/5_Spruce_ID.png)

## Spruce ID

**[Spruce ID](https://marketplace.auth0.com/integrations/siwe?_ga=2.68427345.1715226261.1651077745-2109166029.1639592395&_gac=1.120108410.1648222091.Cj0KCQjw0PWRBhDKARIsAPKHFGjo3PjbfIAxFplxzf6cNR80lX_rTDF62HWDg86rRmPMKYqH9ReU2J8aAp5kEALw_wcB&_gl=1*1p54hh5*rollup_ga*MjEwOTE2NjAyOS4xNjM5NTkyMzk1*rollup_ga_F1G3E656YZ*MTY1MTA3Nzc0NC4xNjYuMC4xNjUxMDc3NzQ0LjYw)** <br>
[Spruce](https://www.spruceid.com/) allows users to control their data across the web. The Sign-In with Ethereum integration from Spruce in the Auth0 Marketplace enables any Auth0 client to handle Ethereum account-based authentication. Sign-In with Ethereum was recently standardized in a Web3 login effort led by The Ethereum Foundation, Spruce, and ENS. The integration leverages an identity server hosted by Spruce/ENS to manage the authentication and also incorporates blockchain-hosted ENS profiles if they are available.

Be sure to check each month as we feature the latest integrations from our growing partner ecosystem. Meanwhile, check out our current list of partner integrations at [marketplace.auth0.com](http://marketplace.auth0.com/)

Interested in building an integration with us? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started.

Marketplace Partner Spotlight: What’s New from February and March

auziros:jeana-tahnk

Jeana has been in the tech industry for 15+ years, both as a communications professional and writer. As Director of Global Communications at Auth0, she works with her internal team and external agencies to amplify the company's visibility worldwide and establish its leadership in the identity industry. When she is not working, she can most likely be found on a field watching one of her three kids playing sports, or cleaning up after her one-year-old retriever who chews everything.

Senior Director, Global Communications

Jeana Tahnk

Trusted integrations from industry-leading third-party solutions extend Auth0's functionality to solve increasingly complex identity needs



**BELLEVUE, Wash. – Sept. 22, 2020 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced the launch of [Auth0 Marketplace](https://marketplace.auth0.com), a trusted partner integrations catalog that enables customers to quickly extend the core functionality of the Auth0 platform and use it as an identity solutions hub for their specific needs. Auth0 Marketplace, with its ever-growing breadth of verified partner integrations, provides customers with the extensibility, customization, and confidence to meet their identity needs of today and tomorrow.

Auth0 Marketplace gives customers the power and flexibility to combine Auth0 with adjacent technologies, enabling them to put identity at the forefront of larger projects such as digital transformation, threat detection, compliance, customer conversion, and more. The identity management landscape is increasingly complex, fueled in large part by new security threats, regulatory requirements, privacy laws, and user convenience demands. Yet its function within enterprises is simultaneously becoming more critical, making extensibility a pivotal feature within any identity platform. 

Auth0 Marketplace leverages Auth0's inherently extensible platform even further and supports solutions that cover a wide range of identity needs, including Consent Management, Identity Proofing, Log Streaming, Security, SMS/Email, Single Sign On, Social Login, and more. All integrations have been verified for security and functionality, and are easily discoverable. Once integrations are selected, installation wizards and guides help customers enable these new partner solutions quickly. 

The launch of Auth0 Marketplace reveals two new categories of partner integrations: 

* [**Consent Management**](https://marketplace.auth0.com/categories/consent-management): Obtain and maintain user consent records for collecting data (e.g., via cookies) for ongoing adherence to data privacy regulations like GDPR, CCPA, etc. Auth0 Marketplace features new partner integrations from MyLife Digital, OneTrust, and others. 

* [**Identity Proofing**](https://marketplace.auth0.com/categories/identity-proofing): Verify a user's identity based on real-world factors (e.g., biometrics) and additional factors before granting access. Auth0 Marketplace launches with new partner integrations from Onfido, Vouched, ID DataWeb, Caisson, and others. 

Auth0's existing integrations are now discoverable and available in [Auth0 Marketplace](https://marketplace.auth0.com/), including recently-launched Log Streaming from Splunk, Datadog, Azure Event Grid, and Amazon EventBridge. 

"Consent management, together with identity management, provide a powerful solution for the adherence to the many data privacy policies, like GDPR and CCPA, that continue to crop up and provide incredible hassles for companies," said Kevin Kiley, Chief Revenue Officer at OneTrust. "This issue and need will not go away. Being a premier launch partner in Auth0 Marketplace gives us visibility with Auth0's thousands of customers, and provides them with an integral technology that is more important than ever with today's numerous privacy laws." 

"We are excited to be part of the Auth0 Marketplace launch and have our solution serve as an integral component for Auth0 customers' identity architectures," said Rick Hofmann, VP of Global Partnerships and Alliances at Onfido. "As companies look to accelerate and scale their digital transformation, being able to remotely tie a user to their real, physical identity at onboarding and at other points along the customer journey, is critical to reducing fraud and building customer trust. We look forward to servicing additional audiences via Auth0 Marketplace."

By becoming part of Auth0 Marketplace, partners can participate in the growing demand for digital identity solutions and showcase their innovative products to Auth0's 9,000+ customers worldwide.

"Launching Auth0 Marketplace is a great milestone for the company and further highlights the demand for an extensible identity platform. Giving customers the power to fully adapt Auth0 to their needs widens their ability to build a secure, end-to-end holistic identity solution. Auth0 Marketplace partners represent the integrations that matter for identity," said Shiven Ramji, Chief Product Officer at Auth0. "Auth0 Marketplace will open the door to external innovation and make it easier for our customers to work with Auth0 as a true hub for identity management."

'[**Introducing Auth0 Marketplace**](https://auth0.com/blog/introducing-auth0-marketplace)' provides more detail about how to discover and enable integrations that help businesses solve identity. In addition, Auth0 will be hosting a webinar on October 7th to take a deep dive into Auth0 Marketplace and how it can help customers. Please visit the [registration page](https://auth0.com/resources/upcoming-webinars/auth0-marketplace-webinar) for more details. Companies that wish to become part of Auth0 Marketplace can find more information at the [Auth0 Partners page](https://auth0.com/partners). 
 
<include src="asides/AboutAuth0" />

### Media Contacts
Jeana Tahnk <br />
Global Communications <br />
Auth0 <br />
press@auth0.com

Hannah Carroll <br />
Matter for Auth0 <br />
auth0@matternow.com <br />


Auth0 Marketplace Launches and Provides Even Greater Extensibility for Building Identity Solutions

Actions Integrations reduce the amount of custom code you need to write, maintain, and update. 

[Actions launched recently](https://auth0.com/blog/actions-now-generally-available/) as the next evolution of extensibility with Auth0, picking up where our legacy extensibility tools Rules and Hooks leave off. Actions unifies the Auth0 extensibility experience in one place. With it, we took the power of Rules and Hooks and created a greatly improved developer experience with features such as an industry-standard VS Code style editor, typescript, draft mode, version control, improved secret management, and an expanded library of NPM modules. Actions gives developers the ability to customize Auth0 using the full spectrum of coding options from pro-code to [low-code](https://auth0.com/blog/what-is-low-code-how-low-code-can-speed-digital-transformation/), with the addition of no-code Actions Integrations.

Actions Integrations, as our new zero-code layer, offers an easy experience to extend Auth0 with partner-built innovations with no coding required. Now you can implement key integrations such as Identity Verification or Consent Management to your workflow without writing or maintaining a single line of code, the provider of the integration takes care of that. To use Actions Integrations, simply install an integration from the Auth0 Marketplace and drag-and-drop it into your Actions workflow. Then with only a few configuration settings, the integration is part of your tenant.

Actions Integrations, currently in Beta, are now available through the [Auth0 Marketplace](https://marketplace.auth0.com/) and in Actions in the Auth0 Dashboard. This marks an essential milestone in how you can leverage innovations from Marketplace Partners into your Customer Identity Access Management (CIAM) workflows. Through Actions and Marketplace, we are creating an ecosystem of sustainable, and ever-growing plug-and-play partner integrations that allows developers to solve many identity extensibility scenarios faster and without extra code.

Pro-Code custom Actions will continue to be a core feature of Auth0, with all the support you’ve come to expect. By adding Actions Integrations to our offerings, we give you the option to replace the custom code for common solutions with no-code integrations and leave the custom code layer for unique use cases to you. This reduces your overall maintenance and risks associated with custom code.

## Plug & Play Extensibility

### Endless innovation, centrally maintained

Satisfy your identity requirements right out-of-the-box without having to write custom code. Actions Integrations are reusable modules that are centrally maintained by a vetted Marketplace Partner. Integrations are designed to be maintained by the Partners with updates propagating automatically to all instances.This results in faster time-to-market while greatly reducing maintenance costs and resource drain associated with code updates that can result in having to rebuild Rules and Hooks.

### Common use cases

Actions Integrations exist for the most common use cases of custom extensibility. These currently include:

*   **ID DataWeb:** Real time and self service global identity verification
*   **Eva:** Second-factor voice biometric 
*   **Scaled Access:** Delegated user access management
*   **One Trust:** Consent and user preferences management
*   **Incognia:** Mobile identity proofing with address verification
*   **Incognia:** Mobile login with location behavioral biometrics
*   **SecZetta:** Real-time, risk-based authentication
*   **Yoonik:** Second-factor facial biometric
*   **Infobip:** Global SMS messaging
*   **Amazon:** Simple Notification Service (SNS) for microservices and serverless applications by Amazon
*   **ClickSend:** Global SMS messaging
*   **Cumul.io:** Self-service data visualization platform
*   **DataGuard:** Consent and user preference management
*   **Esendex: SMS authentication
*   **Mitto:** Global SMS messaging
*   **Plivo:** SMS authentication
*   **Telesign:** Global SMS messaging
*   **Vonage:** Global SMS messaging

<br>

With [Auth0 Marketplace](https://marketplace.auth0.com/), we are building partnerships to deliver innovations that further reduce your need to code features from scratch. After the public launch of Actions Integrations, we will continue to grow our Marketplace catalog, adding more services and modules to help you expand and customize your CIAM implementation.

We encourage you to start using Actions integrations to satisfy any of the common use cases that apply to you. And of course, if you encounter any questions or have any comments, please direct them to our team of identity specialists.

Auth0 No-Code Actions Integrations Now Available in Beta

Check out the integrations our ecosystem partners are building

Extensibility is one of our core capabilities at Auth0, which is why we built the [Auth0 Marketplace](https://marketplace.auth0.com/), making it easier than before to discover the integrations you need to solve identity. The Auth0 Marketplace allows us to easily connect customers with our integration partners and allow you to customize a unique identity solution. Our partners are tapping into the nearly endless possibilities for customized integrations, and we’re excited to see this list continue to grow.

So to celebrate all the awesome integrations and to inspire you as well, we’re going to start sharing the newest integrations we’ve launched recently:

![Berbix Verify](https://images.ctfassets.net/23aumh6u8s0i/2tC5hB4pASo7o9GRBOzEa2/2ee34d4ced457d79f7116c4bb9284615/001_Berbix_Verify.png)

## Berbix Verify

**[Berbix Verify - Instant, automated, and flexible ID verification and biometrics](https://marketplace.auth0.com/integrations/berbix-verify)** <br>
The new [Berbix](https://www.berbix.com/) integration combines authentication and identity verification for a better, more secure customer experience. Berbix provides instant, automated, and flexible ID verification with optional biometric comparisons for a seamless onboarding and re-verification experience. Within a few clicks, you can require identity verification for all users or use a highly flexible integration to target high-risk users or users in specific scenarios. 

![TrueBlue](https://images.ctfassets.net/23aumh6u8s0i/7PBjRNwT2ocPyi0ylBtOE/bbad139be93fba60312be76a90018249/002_TrueBlue_Identity_Verification.png)

## TrueBlue

**[TrueBlue - Australian identity verification](https://marketplace.auth0.com/integrations/trueblue-actions)** <br>
The[ TrueBlue](https://www.trueblue.id/) Actions integration with Auth0 provides Australian-based businesses with the ability to enable secure document identity checks backed by the Australian Department of Home Affairs. With the TrueBlue integration, as users sign up, they receive an identity verification request to submit their details through a custom URL. The documents are then validated by the Department of Home Affairs, without the need to store personal identity documents long term. Using the same Auth0 integration, TrueBlue is currently extending the document types and regions supported.

![authID.ai](https://images.ctfassets.net/23aumh6u8s0i/7gxmmPQjnKHoNGD8W6XO8w/8a1f3ae26409965bcb61f355d765d4af/003_Verified_Biometric_MFA.png)

## authID.ai Verified™

**[authID.ai Verified™ - Biometric MFA](https://marketplace.auth0.com/integrations/verified-biometric-mfa)** <br>
The new[ authID.ai](https://authid.ai/) Actions integration replaces OTP & KBA with facial biometric authentication to prevent account takeover and fraud. Verified by authID.ai strengthens multi-factor authentication by adding advanced facial biometric authentication to verify the user, not just the device. authID.ai’s drag-and-drop solution integrates seamlessly with Auth0 to protect user identity with encryption, increase user certainty to stop account takeover and fraud, and reduce customer effort with low-friction authentication.

![Signicat Express Auth](https://images.ctfassets.net/23aumh6u8s0i/5UQT5jkbzPBDzr6p4bNzBP/dbb429ab44760f6f850470be7f0a980c/004_Signicat_Express_Auth.png)

## Signicat Express Auth

**[Signicat Express Auth - Identity services for the European market](https://marketplace.auth0.com/integrations/signicat-express-auth)** <br>
[Signicat’s](https://www.signicat.com/) Express Auth Actions integration provides services for secure authentication using trusted third-party integrations. Following European eIDAS regulations and AML directives, Signicat provides a subset of services integrated in the Auth0 platform enabling customers to access a European market through 30+ electronic identity schemes. The Signicat Express authentication plugin quickly integrates these services into your Auth0 tenant to enable secure authentication for your end users.

![Logz.io](https://images.ctfassets.net/23aumh6u8s0i/5SNX7CgAg8UNfYXKldfPop/692bb3f6a017d05d56606978fc394545/005_Logz.io_Cloud_SIEM.png)

## Logz.io

**[Logz.io Cloud SIEM - Cloud native SIEM](https://marketplace.auth0.com/integrations/logz-io)** <br>
[Logz.io](https://logz.io/) Cloud SIEM enables you to centrally monitor workflow logs to quickly identify, investigate, and remediate potential and emerging threats. Using Kibana open source visualizations, combined with AI and Machine Learning-based security analytics, the Logz.io integration allows you to easily inspect and investigate relevant event data. Gain contextual visibility into attacks and drill down into granular user data to alert and respond to threats in real time. 

![CircleCI](https://images.ctfassets.net/23aumh6u8s0i/3LRQLTvYkXE8oK2nxbHx7z/2f604165c7b437f1d15fbdf94ae8343d/006_Circle.png)

## Circle

**[CircleCI - Credential-free cryptographic zero trust authentication](https://marketplace.auth0.com/integrations/circle)** <br>
[Circle](https://gocircle.ai/) complements Auth0 in two powerful ways to enhance its value to customers and end users. First, it enables secure continuous credential-free authentication across browsers, applications, and devices. Second, it provides a breakthrough method of delegated Human-in-the-Loop Multi-Factor Authentication (MFA) that uniquely addresses the highest requirements for both privacy and security in identity verification. Unique cryptographic authentication helps eliminate credentials-based attacks while delivering a frictionless customer experience.

Be on the lookout each month as we announce the latest integrations coming out of our extensive partner ecosystem. In the meantime, check out our current list of partners and integrations at [marketplace.auth0.com](http://marketplace.auth0.com/).

Are you interested in building an integration with us? Visit [auth0.com/integrate](http://auth0.com/integrate) to get started.

Marketplace Partner Spotlight: What’s New from the Last Quarter of 2021

5e074956ee8ba1fea26e30d28c190495?s=300 avatar

5e074956ee8ba1fea26e30d28c190495?s=300

Full stack developer creating content at Auth0. I love taking a deep dive into hard-to-understand concepts and creating content that makes them easier to grasp. In my free time you can usually find me reading, hanging out with my dogs, or curling in the squat rack.

Former Developer Content Manager

Holly Guevara

Easily add integrations to your application with Auth0 Marketplace


We're excited to announce a brand new way to **find and integrate third-party solutions** into your Auth0 application &mdash; [**Auth0 Marketplace**](https://marketplace.auth0.com)!

<AmpContent>
<amp-youtube
    data-videoid="1rgeO_EbSGg"
    layout="responsive"
    width="480" height="270">
</amp-youtube>

</AmpContent>

<NonAmpContent>

<div class='embed-container' style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden; max-width: 100%;margin-bottom:40px;"><iframe style="position: absolute; top: 0; left: 0; width: 100%; height: 100%;" src='https://www.youtube.com/embed/8fwJwr1Y7hk' frameborder='0' allowfullscreen></iframe></div>

</NonAmpContent>

## What is Auth0 Marketplace

At Auth0, we never want to keep you stuck in a box. That's why we hold **extensibility** as one of our core product capabilities. While the endless options for integration are an excellent way to customize your own unique solution, it can sometimes be difficult and time-consuming to figure out *how* to implement them. 

You've looked through the documentation, waded through Google search results, and still can't figure out the best way to integrate a third-party solution. **We hear you**, so we've put in the work to create a straightforward solution to this problem.

**This is where the Auth0 Marketplace shines.**

With the new Marketplace, you can integrate a third-party service with these simple steps:

- Head to the [Auth0 Marketplace](https://marketplace.auth0.com).
- Search the name of the integration you need.
- Click "Add Integration" or follow the walkthrough under the Installation tab to integrate.

And that's it!

Auth0 Marketplace aims to **simplify your development process** with a straightforward way to add an integration to your application.

### Why use Auth0 Marketplace?

Auth0 Marketplace makes it easier and faster to extend and customize your Auth0 solution.

🤞 **Trusted** &mdash; All of the integrations you find in the Marketplace are pre-validated by Auth0, so you know you can trust them.

🔎 **Searchable** &mdash; Not only can you easily search for an integration you want, but the Marketplace also makes it easy to browse for integrations that you may not even know you need! Browse through our trusted catalog of partner and third-party integrations to see how you can take your Auth0 solution to the next level with just a couple clicks. 

👥 **Open** &mdash; We want the Marketplace to work for you. Do you have an integration in mind that's missing from the Marketplace? We'd love to hear from you! You can [**request an integration**](https://community.auth0.com/c/marketplace/request-integration/89) in our Community forum, or even submit your own! All submissions will be tested and vetted by Auth0 so that you can feel safe using the Marketplace.

## Using Auth0 Marketplace Integrations

Let's see the Marketplace in action by **integrating the GitHub social connection**. This will allow your users to sign in to your application using their GitHub account.

First, make sure you <a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">**sign up for a free Auth0 account**</a> if you don't already have one.

Next, head over to the [Auth0 Marketplace](https://marketplace.auth0.com/) homepage. Here, you have the option to **browse** through the categories on the left to discover ways to extend your solution or just **search** for the integration you already know you want.

Let's search for "**GitHub**". 

![Auth0 Marketplace GitHub integrations](https://images.ctfassets.net/23aumh6u8s0i/351v5uHzNPkeE47679aBDa/6e923d270a47d62861334b463133d0ac/github-auth0-integration-search)

This gives you three options:

- GitHub Social Connection
- GitHub Enterprise Cloud SSO Integration
- GitHub Enterprise Server SSO Integration

Select the first option, **GitHub Social Connection**.

![Auth0 Marketplace GitHub social connection](https://images.ctfassets.net/23aumh6u8s0i/4V8Vp2nVjoVUHi8WA0K8dT/626e808cacc64c9e22ee0382d2a65700/auth0-marketplace-github-login)

This will bring you to the GitHub integration page, which contains the following information: 

- Description of the third-party integration
- Link to the third-party integration website and the privacy policy
- Link to the [support page](https://support.auth0.com/) for the GitHub integration
- Installation tab where you'll find instructions to add the integration
- An "Add Integration" button, which will take you to the Auth0 dashboard to install the integration

> ❗ Note: Every integration has its own support link. For partner integrations, you'll be taken to the partner website to receive the best support.

Click on the **Installation** tab, and you'll see a list of step-by-step instructions to integrate the GitHub login option into your application.

![Auth0 Marketplace GitHub social connection installation steps](https://images.ctfassets.net/23aumh6u8s0i/7r7vtrz8OmeglSi7LPyQY8/34ef5a8b0020221fdc25bc428b727c16/auth0-marketplace-github-installation)

This integration requires you to first set up a GitHub application. The integration instructions tell you exactly how to do this, so just refer to the steps there while setting it up.

For the Auth0 side of the setup, go back to the [Auth0 Marketplace GitHub integration page](https://marketplace.auth0.com/integrations/github-social-connection) and click on the "Add Integration" button. This will take you directly to the GitHub integration configuration page in the Auth0 dashboard. Continue to follow the steps listed on the GitHub Marketplace Integration page to activate the integration. 

Once you've finished configuring your GitHub options, click **Create**. 

You'll be directed to your Auth0 Applications list. To test that it works, select the **Default App** and click on **Try Connection** in the top right corner.

You'll be asked to authorize the Auth0 application to access the selected permissions, and if the connection works correctly, you'll see an "It Works!" page with the user profile information.

![Auth0 GitHub social connection authorization](https://images.ctfassets.net/23aumh6u8s0i/7oJ0wYLy9ro7Vajap1gpx5/88e9e7da76e4fcbd3e96c934d6e47e45/github-auth0-authorization)

![Auth0 GitHub social connection authorization](https://images.ctfassets.net/23aumh6u8s0i/7oCyzeToF0nd2pgQFIsL2Q/0ed02467307759262e91acb05c0c6daf/github-auth0-authorization-success)

And that's all! With Auth0 Marketplace, you were able to:

- Quickly find the integration you want
- Get help using the link on each integration page
- Follow step-by-step instructions to implement the integration

Go ahead and [test out some more integrations](https://marketplace.auth0.com) on your own and let us know what you think in the comments below!

<div class="webinar-card" style="background:#f4f4f4;padding:35px;margin-bottom:40px;">
    <h3 class="text-center">Upcoming Webinar: Auth0 Marketplace</h3>
    <p>Join us on <strong>October 7th, 2020 at 8 am PT or 4 pm PT</strong> for a live panel discussion where we introduce Auth0 Marketplace and discover how it can help you:</p>
    <ul>
        <li>Discover new identity solutions</li>
        <li>Extend Auth0 with trust</li>
        <li>Reduce the time needed to implement identity</li>
    </ul>
    <br>
    <div class="text-center">
        <a class="btn btn-success" style="width:80%;margin-bottom:5px;" href="https://auth0.com/resources/upcoming-webinars/auth0-marketplace-webinar?utm_source=auth0_blog&amp;utm_medium=intro_marketplace&amp;utm_campaign=marketplace_webinar"> 
            Register for 10/7 at 8 am PT</a>
        <a class="btn btn-success" style="width:80%" href="https://auth0.com/resources/upcoming-webinars/auth0-marketplace-webinar-session-2?utm_source=auth0_blog&amp;utm_medium=intro_marketplace&amp;utm_campaign=marketplace_webinar"> 
        Register for 10/7 at 4 pm PT</a>
    </div>
</div>

## Partner Spotlight

We want to give a huge shoutout to our Auth0 Marketplace partners! You can easily add any of these partner integrations to your application by visiting each of their linked integration pages.

### OneTrust

[OneTrust](https://www.onetrust.com/) is a growing leader in privacy management and compliance. 

With the [OneTrust Auth0 integration](https://marketplace.auth0.com/integrations/onetrust-consent-management), you can easily add consent data to user profiles, automate compliance and privacy regulations, and give your users the power to control their own privacy preferences.

### Onfido

[Onfido](https://onfido.com/) is a leader in digital identity verification. With the Onfido integration, you can require your users to identify themselves during authentication, onboarding, or while performing any other high-risk actions. Onfido's robust technology can verify your users' real identities using a photo ID and facial biometrics.

Add Onfido to your application today by following the instructions on [Onfido's Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/onfido-identity-verification).

### ID DataWeb

[ID DataWeb](https://www.iddataweb.com/) is an identity verification and fraud detection service boasting over 70 verification options. 

Using the [ID DataWeb Auth0 integration](https://marketplace.auth0.com/integrations/iddataweb-identity-verification), you can take advantage of ID DataWeb's verification workflows, robust management and reporting dashboard, and more.

### Scaled Access

[Scaled Access](https://www.scaledaccess.com/) is a cloud-based authorization platform that allows you and your users to manage access to protected content, data, or tools. 

Some of Scaled Access's extensive authorization offerings include relationship-based access control, fine-grained authorization, and more. You can integrate these advanced authorization offerings into your own application by visiting the [Scaled Access Marketplace integration page](https://marketplace.auth0.com/integrations/scaled-access). 

### Perch

[Perch Security](https://perchsecurity.com/) is a flexible 24/7 threat detection and response platform. By adding Perch to your application, you'll be alerted of threat activity on your network, receive extensive reporting based on Auth0 log data, and more.

Try out Perch today by following the installation steps on the [Perch Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/perch-security-log-streaming).

### Vouched

[Vouched](https://www.vouched.id/) boasts secure, real-time identity verification and end-to-end fraud detection so that you can verify your new users instantly. You can easily and accurately verify the identity of your users with the proprietary machine learning algorithms developed by Vouched. Facial recognition, liveliness determination, data extraction, IP address inspection, and more come together to power the Vouched validation process.

Visit the [Vouched Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/vouched-id-verification) to add Vouched to your application today.

### MyLife Digital

[MyLife Digital](https://mylifedigital.co.uk/consent-preference-management-for-ciam/) is a leading universal consent and preference management platform. With MyLife Digital, you can increase user opt-ins, boost user engagement, and be sure you're up to date with compliance.

Using the [MyLife Digital Auth0 Marketplace integration](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent), you can add MyLife Digital to your application's login flow to include consent options for new and existing users.

### Criipto

[Criipto](https://criipto.com/) offers a simple way to set up and add e-ID services of the EU to your application. With Criipto, you'll have immediate access to Norwegian BankID, Dutch DigiD, Danish NemID, and many more. Once integrated, you'll be ready to accept e-ID logins within hours.

Get started with Criipto today by visiting the [Criipto Verify integration page](https://marketplace.auth0.com/integrations/criipto-verify-e-id) in Auth0 Marketplace today!

### Caisson

[Caisson](https://www.caisson.com/) makes it easy to know exactly who your users are by adding ID checks to your application. With Caisson, your users are validated during registration or login with the Caisson ID Check. Caisson will extract information from your users' photo ID (drivers license, passports, etc) and validate using their state of the art facial comparison algorithms.

You can add Caisson to your application now by visiting the [Caisson Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/caisson-id-check).

### Pulumi

With the [Pulumi](https://www.pulumi.com/) infrastructure as code SDK, you can create, deploy, and manage infrastructure on any cloud using all of your favorite programming languages.

The Auth0 Pulumi integration makes it easy to manage and deploy Auth0, enforce security, and automate everything from setup to testing to delivery. Get started with Pulumi by visiting the [Pulumi integration page](https://marketplace.auth0.com/integrations/pulumi) in Auth0 Marketplace.

### KaKao Login

Kakao Login is South Korea's largest mobile messaging app operator. It includes mobile messaging (Kakao Talk), gaming (Kakao Games), music (Melon), e-mail (Daum Mail), search (Daum Search), news (Daum News), and more.

Let users login using their KaKao account by visiting the [KaKao Login integration page](https://marketplace.auth0.com/integrations/kakao-login) on Auth0 Marketplace.

## What's Next?

We're so excited to get Auth0 Marketplace into your hands! We'd love to hear what you think about the Marketplace. Be sure to comment below with your thoughts or questions and **let us know any future integrations you'd like to see**.

This is just the beginning of Auth0 Marketplace, and we can't wait to see where we can take it with your feedback!

<include src="asides/AboutAuth0" />


Introducing Auth0 Marketplace

Learn how to implement consent management with Auth0 Marketplace


  
## What is Consent Management?

With the [growing number of security breaches](https://auth0.com/blog/the-11-biggest-data-breaches-of-2020-so-far/) over the past decade, it's no surprise that privacy concerns and accompanying legislation have become hot topics. This has also prompted a huge shift in how websites and applications obtain user consent for collecting their data, otherwise known as **consent management**.

Implementing consent management for your users can quickly become a monumental task. First, you have to understand the privacy regulations that affect your users. You may serve users from all over the world, so the exact regulations will vary. After you understand *what* you need to implement, then comes the *how*.

Managing user opt-ins, email consent, communications, data storage, and more on your own can become overwhelming. Luckily, there are a few companies out there that have made consent management their bread and butter!

Let's look at some of the ways you can implement **[consent management](https://auth0.com/blog/what-you-need-to-understand-about-consent-management)** in your application using the **Auth0 Marketplace**.

<include src="AvocadoLabsPromo" description="Join us on Monday, October 5th, 2020 at 9 am  PT as we talk about our strategy behind building the Auth0 Marketplace and the opportunity it delivers." buttonText="Register now!" buttonLink="https://avocadolabs.dev/events/avocado-labs-community-4/?utm_source=auth0_blog&amp;utm_medium=intro_marketplace"/>

<blockquote style="margin:50px 0 60px 0;">For more background on consent management, check out the <a href="https://auth0.com/blog/what-you-need-to-understand-about-consent-management">What You Need to Understand About Consent Management</a> blog post.</blockquote>

## Add Consent Management to your Application

### Meet OneTrust

[OneTrust](https://www.onetrust.com/) is a leader in privacy and consent management solutions. Using the [OneTrust integration in Auth0 Marketplace](https://marketplace.auth0.com/integrations/onetrust-consent-management), you can:

- Add consent data to each of your users' profiles
- Make sure you're in compliance with the various privacy regulations that affect your users
- Enhance your application's transparency with dynamic preference centers customized for each user

Integrating OneTrust into your application is simple. Head over to the [OneTrust integration page](https://marketplace.auth0.com/integrations/onetrust-consent-management), and click on the "Installation" tab.

![OneTrust Auth0 Marketplace integration](https://images.ctfassets.net/23aumh6u8s0i/3eoDj4Ag1QsexeuJIfG1Ew/c78aaed5c88a2e2280da5bd5d3721bdf/onetrust-installation)

This will take you step-by-step through how to configure an [Auth0 rule](https://auth0.com/docs/rules), which will automatically send Auth0 user emails to a OneTrust Collection Point during login.

If you have any questions along the way, please use the "**Get Support**" link on the OneTrust integration page.

### Meet MyLife Digital

[MyLife Digital](https://mylifedigital.co.uk/) is another great option for implementing universal consent and preference management. With the [MyLife Digital Auth0 Marketplace integration](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent), you can easily add consent collection to your user login flow for new and existing users.

Navigate over to the [MyLife Digital Auth0 Marketplace integration page](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent), and click on the "Installation" tab.

![MyLife Digital Auth0 Marketplace integration](https://images.ctfassets.net/23aumh6u8s0i/5OpYJUzgqnPpLU6Ey9Lwpx/4175ca3a241ec7c68860bc6079c4385b/mylife-digital-installation)

The instructions here will walk you through how to set up an Auth0 rule that runs at login and/or signup. Once the user signs in, the rule will redirect them to the MyLife Digital Consentric widget, where they'll be presented with consent options. After they select their options, the Auth0 authentication flow will continue.

If you have any questions or need assistance with the implementation, click on the "**Get Support**" link on the [MyLife Digital integration page](https://marketplace.auth0.com/integrations/mylife-digital-progressive-consent-capture).

## Conclusion

As you've seen, there's a lot that goes into managing user consent, but that doesn't mean implementing it has to be difficult! With the OneTrust or MyLife Digital integrations, adding consent management to your application is a breeze.

If you'd like to learn more about consent management and why you should implement it, check out our [What You Need to Understand About Consent Management](https://auth0.com/blog/what-you-need-to-understand-about-consent-management) blog post.


Consent Management with Auth0 Marketplace

megan-gleason

Megan is Director of Product at Auth0, focusing primarily on developer experience and service management.  She has a passion for building delightful products for technical audiences and previously led the product team at Chef Software.  Megan is a self-described product geek and enjoys international travel and languages.

Director of Product - DX and Service Mgmt

Megan Gleason

Why your need for rapid integrations drives our modality approach



The identity job you're trying to do at the moment — and the most efficient way to tackle it — is what matters to Auth0.

Making sure our product reflects the simplicity and power you need, when you need it, is why we've embraced a "modalities" model when we work on our developer experience (DX). Because our platform is integrated tightly with our customers' applications, we want to provide developers with a slider on DX that fits the mode of the moment when working with Auth0.

In the Auth0 Product Team, our mission is to make identity simple regardless of the modality you choose to use. The questions that keep us up at night are: Is there a comparable experience across all the modalities? Can you perform a core action of using Auth0 via any of these approaches? Can you really choose your own adventure? 

![Auth0 offers a great pro-code experience](https://images.ctfassets.net/23aumh6u8s0i/2DphcLZYf8BdGfRsZYqekE/805542e2b7bbb6ebfe03bffa5320f25a/no-code-to-pro-code-2)

## Modalities

Products like Auth0 that rely on integration of services with its APIs must meet high standards of utility and simplicity to deliver great DX. The best products in this category "just work" or feel like "magic" to developers who use them. In pursuit of creating those experiences, at Auth0 we look at DX through a particular lens: modalities. (Credit to Ike DeLorenzo of Twilio for introducing me to this idea in 2018.)

Modalities allow us to go beyond traditional UX personas, blending in a bit of jobs theory to get a more nuanced view of how our products need to perform in different situations. A modality effectively summarizes the way in which a user, in this case a developer, is looking to interact with the product right now. A developer likely doesn't stay in one modality forever, but may switch from one to another depending on what they're trying to achieve — and that's where that slider on DX comes into play. 

The following subsections highlight how we talk about modalities at Auth0.

### No Code

A developer in no-code modality is looking for a click-button, out-of-the box experience. For a technical product like Auth0, often we think about developers who might be evaluating the product to understand what it can do without investing a ton of time. Our site [flows.auth0.com](https://flows.auth0.com) is an example of a no-code experience that connects users to the value of Auth0 within seconds. Going one step further, our [Manage Dashboard](https://auth0.com/docs/dashboard) allows developers to quickly change product configuration, like implementing [multi-factor authentication (MFA)](https://auth0.com/docs/multifactor-authentication), with the flip of a button when they are working in this modality.

### Low Code

In this modality, a developer is ready to commit some time, but is looking for reusable patterns to reduce effort wherever possible. Templates, sample apps, and code editors in the Manage Dashboard help low-code developers make quick progress without setting up a full development environment, writing a starter app for prototyping from scratch, and so on. [Auth0's Rules](https://auth0.com/docs/rules) and [Hooks](https://auth0.com/docs/hooks) features, quick customization of the login experience for end users via Universal Login, as well as SDKs with sample code for a broad range of technology platforms, all support developers looking for powerful low-code experiences.

### Pro Code

Once the value of Auth0 is fully realized, developers may switch into the pro-code modality. The same APIs that power the Manage Dashboard can be called directly via custom code in the developer's app. By integrating Auth0 with SCM and even their CI/CD pipelines, developers can fully automate configuration of the system via code. For a great pro-code experience, we embrace API-first development principles ensuring that all of Auth0's capabilities can be exposed and managed this way.

![Auth0 focuses on developer experience.](https://images.ctfassets.net/23aumh6u8s0i/AoR2NphX1ZibBcAmz3rAM/9749691075472a83077f07513af1668d/no-code-to-pro-code)

## Cruising through Modalities

What's powerful about modalities is the recognition that on any given day, a developer may have reason to interact with our product in a different way. We want to provide the same intuitive, predictable, and "magic" experience to developers regardless of where they are on this spectrum. At Auth0 we have an entire product development domain dedicated to DX, and our objective is to surface and eliminate friction across all of these modalities. We want developers to succeed with Auth0 whether they are poking around during their lunch hour or fully automating their use of the product with configuration as code, and our mission is to make the transition between those modalities as smooth as it can be.

If you're interested in sharing your ideas about DX in Auth0, our product development teams would love to talk with you. Visit [auth0.com/feedback](https://auth0.com/feedback) or reach out to us via our [community site](https://community.auth0.com/). Thanks for using Auth0 and for helping us make a great product based on your needs and experiences.

<include src="TweetQuote" quoteText="What's powerful about modalities is the recognition that on any given day, a developer may have reason to interact with Auth0 in a different way."/>

<include src="asides/AboutAuth0" />


Designing for Devs at Auth0

eHk3ciM

I am the Group Manager, Developer Content at Okta, and a Google Developer Expert in Web Technologies and Angular. I'm passionate about identity, authentication, constant learning, and developer communities. As a developer advocate, engineer, mentor, and international speaker, I love learning from and sharing with other inhabitants of the tech space.

Group Manager, Developer Content

Kim Maida

This new series of short screencasts walks through common scenarios for integrating Auth0



Auth0's Developer Success Engineers work with customers around the world to make it as easy as possible to integrate Auth0 into their products. Working at the front line of real-world implementations, they know what difficulties to watch out for, as well as the solutions that keep things running smoothly.

We're excited to share this knowledge in a new, ongoing series of **Developer Success videos**, now available on the [Auth0 YouTube channel](https://www.youtube.com/auth0)! These short screencasts walk through solutions to the most common issues addressed in support tickets. The video series will be updated regularly, so make sure to [subscribe to the Auth0 YouTube channel](https://www.youtube.com/auth0?sub_confirmation=1) if you'd like to be notified about new releases.

We're kicking things off with five brand-new videos:

### Integrating Auth0 with Azure AD

<iframe width="560" height="315" src="https://www.youtube.com/embed/tV-2nQRFCio" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

> "In this tutorial we'll show you how to quickly integrate your Azure AD instance with Auth0 and be up and running in minutes...Now we just need to configure our connection in Auth0. In the Auth0 dashboard, go to connections, click Enterprise, and then at the bottom here you'll see Microsoft Azure AD. Click the little plus button on the right."

You can read more about [connecting your app to Microsoft Azure Active Directory](https://auth0.com/docs/connections/enterprise/azure-active-directory/v2) in our docs and leave feedback on this video in our [community forum](https://community.auth0.com/t/how-to-integrate-auth0-with-azure-ad-video-walkthrough/22517).

### Setting up a Custom Database Connection in Auth0

<iframe width="560" height="315" src="https://www.youtube.com/embed/Go_rvdYuF5c" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

> "In this video, I am going to show you how to set up a custom database connection, including user migration. I will also show you how to troubleshoot the connection. Before creating a connection in Auth0, we will set up an external database and create some demo users. To make it simple, I am going to use mLab, which is a fully managed cloud database service featuring automated provisioning and scaling of Mongo databases."

You can read more about [authenticating users using a custom database](https://auth0.com/docs/connections/database/custom-db) in our docs and leave feedback on this video in our [community forum](https://community.auth0.com/t/how-to-set-up-custom-database-connections-video-walkthrough/22518).

### Configuring SAML when Auth0 is Service Provider with Identity Provider Initiated Flow

<iframe width="560" height="315" src="https://www.youtube.com/embed/hZGYWeBvZQ8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

> "Identity provider initiated SAML login flow starts by the user logging into the identity provider. The identity provider's responsibility is to send the SAML token, aka the assertion of the authenticated user, to the service
provider, once the user provides valid credentials. Once Auth0 is configured as the SAML service provider, it acts as an intermediary. We decode the received assertion from the identity provider and extract the user information, amongst other things required by the SAML protocol."

You can read more about the [SAML protocol](https://auth0.com/docs/protocols/saml/saml-configuration/auth0-as-service-provider) in our docs and leave feedback on this video in our [community forum](https://community.auth0.com/t/how-to-configure-saml-when-auth0-is-service-provider-with-identity-provider-initiated-flow-video-walkthrough/22519).

### Custom Domain Issues

<iframe width="560" height="315" src="https://www.youtube.com/embed/f6fkOkS1RFA" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

> "This video addresses some common support issues associated with setting up custom domains in Auth0. After you have enabled your custom domain, there's some simple but important settings that we need to be aware of. This is especially true when using Universal Login."

You can read more about [custom domains](https://auth0.com/docs/custom-domains) in our docs and leave feedback on this video in our [community forum](https://community.auth0.com/t/how-to-solve-common-custom-domain-issues-configuration-video/22520).

### Connecting Auth0 to an ADFS server

<iframe width="560" height="315" src="https://www.youtube.com/embed/ICW6sGP9ht8" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>

> "In this tutorial, we'll show you how to quickly integrate Auth0 with your ADFS instance...Let's move on to the final step, configuring our ADFS connection in Auth0. First, let's go to our Enterprise connections. Click the plus
sign next to ADFS to configure a new connection."

You can read more about [connecting Auth0 to your ADFS server](https://auth0.com/docs/connections/enterprise/adfs) in our docs and leave feedback on this video in our [community forum](https://community.auth0.com/t/how-to-connect-auth0-to-an-adfs-server-video-walkthrough/22521).

## We'd Love Your Input!

Are these videos helpful? Please share any and all feedback you may have in the comments below. We also welcome suggestions and requests for topics to cover in future videos — what can we do to make your Auth0 integration ASAP (*as smooth as possible* 😉)?


"integrations"