What you can do with Auth0
Every task in plain language. Pick one, and we can help you get access.
477 things you can do
Auth0
Auth0 (now part of Okta) is a leading identity-as-a-service platform providing authentication and authorization for applications, APIs, and AI agents. It implements OpenID Connect, OAuth 2.0, SAML 2.0, WS-Federation, and SCIM, and exposes a Management API (OpenAPI 3.1, 221 paths, 2,567 schemas), an Authentication API, a My Account API, a My Organization API, FGA (Fine-Grained Authorization, OpenFG
19 multi-step recipesRecipes: multi-step jobs
Create API, Role and Bind PermissionsRegister an API, create a role, and attach the API's permissions to the role.Create Client and Grant Access to an Existing API
Create a client and authorize it for an existing API audience.Create Client, Create Connection and Enable
Create a client and a connection, then enable the connection for the client.Create Connection and Enable for a Client
Create a connection and enable it for a client application.Create Organization and Add Connection
Create an organization and attach an existing connection to it.Create Organization and Add Members
Create an organization and add member users to it.Create Organization and Invite a User
Create an organization and invite a user to join it.Create Organization, Add Member and Assign Member Roles
Create an organization, add a member, and assign organization-scoped roles to that member.Create Organization, Attach Connection and Invite a User
Create an organization, attach a connection, and invite a user via that connection.Create Role and Add Permissions
Create a role and attach API permissions to it.Create Role and Assign to a User
Create a role and assign a user to it.Create User and Assign Direct Permissions
Create a user and grant direct API permissions.Create User and Assign Roles
Create a user and grant tenant roles in one pass.Create User, Add to Organization with Roles
Create a user, add them to an organization, and assign org-scoped roles.Find Role by Name and Assign Users
Resolve a role by name then assign users to it when it exists.Find User by Email and Add to an Organization
Resolve a user by email then add them to an organization when found.Find User by Email and Assign Role
Resolve a user by email then grant roles when the user exists.Offboard User and Revoke Grants
Resolve a user, list their grants, and revoke a grant when present.Provision Machine-to-Machine Application
Register an API, create a client, and authorize the client for the API.
Authorization for Apps
Save test assertions for an authorization modelRegister a new API (resource server)Delete an API (resource server)Update an API's settingsRead the test assertions for an authorization modelList APIs registered in the tenantGet an API's settingsCybersecurity Management
Create or replace the custom signing keys JWKSDelete all custom signing keysCreate a pre-activated encryption keyRekey the encryption key hierarchyImport wrapped key material and activate a keyDelete a customer-provided encryption keyCreate a public wrapping key for key importRotate the application signing keyRevoke an application signing keyTurn risk assessments on or offSet how long devices are rememberedGet the custom signing keys JWKSList the tenant's encryption keysGet one encryption key by key IDList application signing keysGet one application signing key by key IDGet the tenant's risk assessment settingsGet the new-device assessor settingsDecentralized & Verifiable Identity
Create a verifiable credential templateDelete a verifiable credential templateUpdate a verifiable credential templateList verifiable credential templatesGet a verifiable credential templateIdentity & Access Management
Delete all grants for a userDelete a grant by IDCreate a Token Exchange ProfileDelete a Token Exchange ProfileRename or retarget a Token Exchange ProfileRevoke refresh tokens in bulkDelete a single refresh tokenUpdate a refresh token's metadataLog in with a passwordless code (legacy)Log in with username and password (legacy)Delete a sessionUpdate a session's metadataRevoke a session and its refresh tokensGet tokens via any supported OAuth grantSend a password reset emailSign up a new user to a database connectionDelete a groupLog a user out and redirect with returnToLog a user out via OIDC RP-initiated logoutLog a user out of a SAML identity provider appGet a URL to log in as another userSend a passwordless login code or magic linkRequest an MFA challengeEnroll a new MFA authenticatorDelete an MFA authenticatorRevoke a compromised refresh tokenCreate a roleDelete a roleRename or describe a roleAdd permissions to a roleRemove permissions from a roleAssign users to a roleCreate an MFA enrollment ticket for a userRemove an MFA enrollment so the user can re-enrollSet the full DUO MFA configurationChange individual DUO MFA settingsChoose SMS and/or voice for phone MFAUpdate the Twilio phone MFA provider configurationChoose the phone provider for MFA messagesCustomize phone MFA enrollment and verification messagesOverwrite the APNs push MFA configurationChange individual APNs push MFA settingsOverwrite the legacy FCM push MFA configurationUpdate the legacy FCM server key for push MFAOverwrite the FCM v1 push MFA configurationUpdate the FCM v1 push MFA credentialsConfigure AWS SNS for push MFA from scratchChange individual AWS SNS push MFA settingsChoose the push notification provider for MFAUpdate Twilio SMS MFA settings (deprecated endpoint)Set the SMS MFA provider (deprecated endpoint)Update SMS MFA message templates (deprecated endpoint)Turn an MFA factor on or offSet the tenant's MFA policiesCreate a new authorization model versionGet a device code for device loginCreate a network access control entryReplace a network access control entryDelete a network access control entryPartially update a network access control entryCreate a user in a connectionDelete a user permanentlyUpdate a user's profileReplace all of a user's authentication methodsAdd an authentication method to a userRemove all of a user's authentication methodsRemove one authentication method from a userRename or prefer a user's authentication methodRemove all authenticators from a userDelete a user's federated connection tokensetLink a secondary account to a userUnlink a secondary identity from a userForget a user's remembered MFA browsersRemove a user's multifactor providerAssign permissions to a userRemove permissions from a userRegenerate a user's MFA recovery codeRevoke a user's sessions and tokensClear risk assessors for a userAssign roles to a userRemove roles from a userDelete all of a user's refresh tokensDelete all of a user's sessionsRegister a device public keyDelete a device credentialUnblock by email, username or phoneUnblock a user by user IDGet a delegation token (deprecated)Accept an IdP-initiated SAML sign-onCreate a user attribute profileDelete a user attribute profileUpdate a user attribute profileAdd or delete relationship tuplesLog in with a social provider's access token (deprecated)Create an email verification linkCreate a password reset linkCreate an identity connectionDelete a connectionUpdate a connection's settingsChange which applications use a connectionSet up directory provisioning for a connectionRemove directory provisioning from a connectionUpdate a connection's directory provisioningTrigger an on-demand directory syncReplace the groups selected for directory syncProvision initial keys for an OIDC connectionRotate an Okta or OIDC connection's keysEnable SCIM provisioning on a connectionRemove a connection's SCIM configurationUpdate a connection's SCIM mappingCreate a SCIM token for a connectionRevoke a connection's SCIM tokenDelete a database connection user by emailList user consent grantsList Token Exchange ProfilesGet a Token Exchange ProfileList a user's refresh tokensGet details of a refresh tokenGet a login sessionList SCIM configurations across connectionsList directory provisioning configs across the tenantList groups in the tenantGet a groupList the users in a groupGet a store's AuthZEN PDP configurationDecide if a subject may act on a resourceRun a batch of AuthZEN access evaluationsFind actions a subject can take on a resourceFind resources a subject can accessFind subjects with access to a resourceList a user's MFA authenticatorsGet the logged-in user's profile from a tokenStart a SAML login for an applicationGet SAML 2.0 metadata for an applicationList roles in a tenantGet a role by IDList permissions granted by a roleList users who have a roleGet one MFA enrollment's status and typeList the tenant's MFA factorsGet the DUO MFA configurationList enabled phone MFA delivery methodsGet the Twilio phone MFA provider configurationSee which phone provider delivers MFA codesGet phone MFA enrollment and verification messagesGet the APNs push MFA configurationGet the AWS SNS push MFA configurationSee which push notification provider MFA usesGet Twilio SMS MFA settings (deprecated endpoint)Get the SMS MFA provider (deprecated endpoint)Get SMS MFA message templates (deprecated endpoint)Get the tenant's MFA policiesList a store's authorization modelsGet one authorization model versionList network access control entriesGet a network access control entryList or search users in a tenantGet a user's profile by IDList a user's authentication methodsGet one authentication method of a userList a user's connected accountsGet a user's first confirmed MFA enrollmentList a user's federated connection tokensetsList the groups a user belongs toGet a user's log eventsList a user's organization membershipsList a user's direct permissionsList a user's rolesList a user's refresh tokensList a user's sessionsList a user's device credentialsCheck brute-force blocks by email, username or phoneList brute-force blocks for a user IDFind users by email addressList user attribute profilesList user attribute profile templatesGet a user attribute profile templateGet a user attribute profileList relationship tuple changes in a storeQuery stored relationship tuplesGet a user profile from an ID token (deprecated)Start a WS-Federation loginStart a user login via the authorize endpointCheck many relationships in one requestCheck if a user has a relation to an objectExpand a relationship into its userset treeList objects a user has a relation withList users with a relation to an objectStream objects a user has a relation withList identity connections in the tenantGet a connection's configurationList applications that use a connectionGet a connection's directory provisioning setupGet default directory provisioning attribute mappingList groups selected for directory syncGet signing keys for an Okta or OIDC connectionGet a connection's SCIM configurationGet the default SCIM attribute mappingList a connection's SCIM tokensCheck if an AD/LDAP connection is onlineTenant Identity Federation
Create a self-service SSO profileDelete a self-service profileUpdate a self-service profileSet custom text for a self-service setup pageCreate a self-service SSO setup ticketRevoke a self-service SSO access ticketList self-service SSO profilesGet a self-service profileGet custom text for a self-service setup pageThreat Detection & Response Management
Update bot detection settingsUpdate breached password detectionUpdate brute-force protectionChange the CAPTCHA provider or settingsUpdate suspicious IP throttlingGet bot detection settingsGet breached password detection settingsGet brute-force protection settingsGet the CAPTCHA configurationGet suspicious IP throttling settingsWebhook & Event Subscription Management
Create an event streamDelete an event streamUpdate an event streamRedeliver failed events in bulkRedeliver a single failed eventSend a test event to an event streamList event streamsGet an event stream's configurationList an event stream's delivery historyGet the delivery attempts for one eventOther things you can do
Update tenant branding settingsConfigure a phone messaging providerDelete a phone providerUpdate a phone providerSend a test message through a phone providerCreate a phone notification templateDelete a phone notification templateEdit a phone notification templateReset a phone template to defaultsSend a test message from a phone templateSet the Universal Login page templateDelete the Universal Login templateCreate a branding themeDelete a branding themeUpdate a branding themeCreate a hookDelete a hookUpdate a hookAdd secrets to a hookDelete secrets from a hookUpdate existing hook secretsCreate an applicationRegister or update a CIMD clientAdd a credential to an applicationDelete an application credentialChange a credential's expiryDelete an applicationUpdate an application's settingsRotate an application's client secretCreate a ruleDelete a ruleUpdate a ruleDynamically register an OIDC clientCreate a FormDelete a FormUpdate a FormCreate an organizationDelete an organizationUpdate an organization's detailsAssociate a client grant with an organizationRemove a client grant from an organizationAssociate a connection with an organizationRemove a connection association from an organizationUpdate a connection association on an organizationAdd a discovery domain to an organizationDelete an organization discovery domainVerify or update a discovery domainEnable a connection for an organizationDisable a connection for an organizationUpdate an enabled connection on an organizationInvite a user to an organizationCancel an organization invitationAdd existing users to an organizationRemove members from an organizationAssign roles to an organization memberRemove roles from an organization memberCreate a flowAdd a Flows Vault connectionDelete a Flows Vault connectionUpdate a Flows Vault connectionDelete a flow execution recordDelete a flowUpdate a flowCreate a connection profileDelete a connection profileUpdate a connection profileConfigure an email providerRemove the email providerUpdate the email provider settingsExport users to a fileBulk import users into a connectionSend a user an email verification emailUpdate Universal Login prompt settingsUpdate render settings for many screensSet a prompt's custom text for a languageSet template partials for a promptUpdate render settings for one login screenSet a rule config variableDelete a rule config variableGrant an application access to an APIRemove an application's access to an APIChange the scopes or org usage of a client grantTurn Akamai supplemental signals on or offCreate an authorization storeDelete an authorization storeCreate an email templateReplace an email template entirelyEdit parts of an email templateAdd a new custom domainSet the default custom domainDelete a custom domainUpdate a custom domain's TLS or client IP headerTest a custom domainVerify a custom domain's DNSCreate a log streamDelete a log streamUpdate a log streamCreate a new ActionRoll an Action back to an earlier versionDelete an Action and all its versionsEdit an Action's draft code or settingsDeploy an Action's current draftTest-run an Action with a sample payloadCreate a reusable Actions ModulePermanently delete an Actions ModuleEdit an Actions Module's draftRestore an Actions Module draft from a versionPublish an Actions Module draft as a versionAttach or reorder Actions on a triggerUnblock an IP blocked for suspicious activityUnlink a user account (deprecated)Get tenant branding settingsList configured phone providersGet a phone provider's detailsList phone notification templatesGet a phone notification templateGet the Universal Login page templateGet the default branding themeGet a branding theme by IDList hooksGet a hookGet a hook's secretsList applications in a tenantPreview a Client ID Metadata DocumentList an application's credentialsGet one application credentialGet an application by IDList connections enabled for an applicationList rulesGet a rule by IDList FormsGet a FormList all organizations in the tenantLook up an organization by its nameGet an organization by IDList client grants tied to an organizationList connections associated with an organizationGet one connection associated with an organizationList an organization's discovery domainsShowing 400 of 458. Search above to find the rest.