Identity Access Management

Auth0 / CIAM

Tenant, Applications, APIs, Organizations, Universal Login

OAuth 2.0

Authorization Code, PKCE, Client Credentials, refresh tokens

OpenID Connect

ID tokens, authentication, scopes, claims, nonce

JWT

Claims, signature, iss, aud, exp, sub, scope, JWKS

Auth0 Actions

Custom claims, post-login/token customization, extensibility

Auth0 Connections

Database, Social, SAML, OIDC, Enterprise connections

MFA

Enrollment, factors, recovery, step-up authentication

Attack Protection

Brute-force, breached passwords, bot/attack protection

Auth0 Logs

Production authentication troubleshooting and investigation

API Security

Bearer tokens, scopes, permissions, API JWT validation

Federation / SSO

SAML, OIDC, Entra ID, Okta, enterprise federation

FAPI 2.0

PAR, PKCE, sender-constrained tokens, secure OAuth patterns

Production Support

Real-time incident troubleshooting, RCA, escalation

Security / Compliance

Audit evidence, access controls, authentication logs

Documentation

Runbooks, playbooks, SOPs, RCA documents