Auth0 Platform
Risk-based logins have improved security while flexible actions now support complex user journeys
What is our primary use case?
I use Auth0 Platform, and there are a lot of use cases I have built, mainly regarding CIAM and B2C and B2B scenarios.
In B2C scenarios, I have worked on many things, primarily on user migrations, building scripts, and building journeys.
I use the API features of Auth0 Platform, and I have roles and permissions attached to the API. Based on roles, users are evaluated and then it is decided whether they can call a particular API inside that application or not. Auth0 Platform is where the API evaluation happens, and then it is the application that calls the API.
Auth0 Platform is hosted on AWS for one client that I have worked with, and they have their private cloud hosted in AWS.
It is similar for Auth0 Platform. I use it for log forwarding; I do not directly forward to a SIEM solution. I forward it to AWS, and there I change or populate the logs with some additional data before sending them to the SIEM solution. I use CloudWatch and Lambda function to do that. I also have hosted DNS records in AWS for custom domains, and these custom domains are being used by Auth0 Platform.
Not in all my projects, but in one of them, I use Auth0 Platform to secure AI-powered applications. There is a feature of Auth0 Platform called Auth0 FGA, which is a separate dashboard used to secure fine-grain authorizations. I am using that; it is under POC for one of the clients and it is not fully implemented. However, I have been using some of the AI features of Auth0 Platform to see how they can be leveraged.
The industry segments that Auth0 Platform serves include two retail-based clients, one government client, and one private client regarding greenhouse energy and everything.
How has it helped my organization?
The key benefits that Auth0 Platform brings to the table are about managing users and login because Auth0 Platform is able to block certain traffic when it is risky or prompt them with challenges through risk-based authentications. Those are some aspects that are very good in Auth0 Platform, and it is highly scalable for customer solutions.
Previously, what I have seen was the client faced a lot of downtime with inbuilt tools before using Auth0 Platform because they were not able to scale it up quickly due to managing their own infrastructure where their sign-in widget was hosted. However, with the introduction of Auth0 Platform, since everything moved to the cloud and auto-scaled in AWS, it became much more scalable.
What is most valuable?
The best features in Auth0 Platform are Actions, which I find to be a very good feature because it helps me to write JavaScript functions around it so that many things can be customized.
There are forms, and Auth0 Platform has a lot of inbuilt security to detect bots and other DDoS attacks. They also maintain a list of IPs that have low ratings, so I can block them directly.
There are many features of Auth0 Platform that are very good.
What needs improvement?
Auth0 Platform currently does not support the concept of groups, which makes it difficult for grouping users together and assigning them into applications. Also, it does not have any group-based rules like Okta supports, which assign users to a particular group when certain attributes match. Many clients I have worked with face difficulties in grouping users for a particular application. That is one key feature that Auth0 Platform can solve.
There are features in the AI part of Auth0 Platform that can be more enhanced. I feel that the AI functionalities in Okta are far better or faster compared to Auth0 Platform, where the development regarding AI feels a little less.
The key differences of Auth0 Platform when compared with other technologies of the same kind focus on its lack of groups, which I feel is one of the primary features that is lacking. They are improving a lot of features, and I also saw there are new things coming in, but there are still areas where the invitations for the organization can be improved.
For how long have I used the solution?
I have been working with Auth0 Platform for almost two years now, and I have been working on parallel projects of Okta and Auth0 Platform.
What do I think about the stability of the solution?
Auth0 Platform is very stable from what I have seen. Whenever a lot of traffic comes in, it is able to filter out the correct traffic.
Sometimes false positives do occur; sometimes it identifies incorrectly, but it has mechanisms to evaluate whether it is a correct user or not, using CAPTCHA and everything.
Auth0 Platform is a good product to go with.
What do I think about the scalability of the solution?
Auth0 Platform is highly scalable, so it supports my SaaS multi-tenant architecture running on public cloud infrastructure very well as it can handle a lot of requests coming in based on the subscription model. When a lot of traffic comes and if it is a DDoS attack, then it prevents only the rightful traffic from entering.
Auth0 Platform is scalable. The support is also good, and they help me to scale things up. If I am aware that a certain amount of traffic will come on a certain day, they are prepared for it and increase the number of nodes in Auth0 Platform from the back end. This allows Auth0 Platform to intake more sign-in requests, so with the support and everything, it is very good.
How are customer service and support?
On a scale of one to ten, I would rate the support of Auth0 Platform as nine to ten; it is good. Sometimes they are delayed on certain issues, but it only happens at minor times. Other than that, it is good.
How was the initial setup?
The initial setup for Auth0 Platform took around one to two weeks to complete the basic configurations, and the primary thing that I implemented in Auth0 Platform was user migration.
What about the implementation team?
The client procured Auth0 Platform and worked with Okta directly, not through any third parties.
What's my experience with pricing, setup cost, and licensing?
Regarding pricing that I am aware of, clients are happy with the pricing of Auth0 Platform; it is not expensive, and it is okay to establish it from what I know.
I have worked more on the implementation side of Auth0 Platform.
Which other solutions did I evaluate?
Ping and ForgeRock are also competitors of Auth0 Platform that I have worked with.
ForgeRock compares to Auth0 Platform; it has the groups concept and better-designed journeys compared to Auth0 Platform, which currently does not support guest users to display certain forms, whereas ForgeRock and Ping do. There are certain aspects that Auth0 Platform can improve on for guest users' perspective.
What other advice do I have?
My advice for organizations considering Auth0 Platform is that it is a good tool to implement, focusing mostly on B2C scenarios, though I have implemented B2B as well. Auth0 Platform improves the way security is evaluated; it lacks certain features, but from what I have observed over two years, there are many new features, and I believe the development team is working to make this IDP even better. It helps to scale the sign-in process, and since it is managed by a third-party vendor, I do not have to focus on correcting the identity logic; Auth0 Platform handles that.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Flexible authentication, ready in a day without own infrastructure
Auth0 Streamlines Identity Management with Flexible, Smooth Login
A Convenient Authentication Solution with Room to Improve Advanced Configuration
Auth0 Makes Secure Authentication Fast with Best-in-Class Documentation
Auth0's AI and machine learning capabilities handle complex threat protection behind the scenes. Features like adaptive intelligence for bot detection and anomaly scoring mean we don't have to manually build rules to catch suspicious logins, keeping our platform secure without adding friction for real users.