Topic type: Reference
Purpose: Defines the recommendations Accertify returns for Auth0 logins and sign-ups, and what each Action does with them.
Audience: Engineers, administrators, and security teams.
Applies to: The Post Login and Pre User Registration Actions.
Does not apply to: Event types that are integrated directly with Accertify outside of Auth0.
Once the Actions are live, Accertify scores each attempt in real time and returns a recommendation.
Recommendation: approve.
The login continues with no visible change.
Recommendation: challenge.
The user completes MFA before the login finishes.
Recommendation: deny.
The login is blocked.
If Accertify returns a recommendation not listed above, the Action follows your FAIL_OPEN setting. It allows the login when FAIL_OPEN is true and denies it with ap_unmapped when FAIL_OPEN is false. It logs unmapped recommendationCode.
Recommendation: approve.
The account is created as normal.
Recommendation: deny.
The sign-up is blocked and no account is created.
Neither Action adds or changes ID token or access token claims, so risk results aren't exposed to the person being assessed.
See also:
Account Protection Action Settings[Accertify Account Protection Action Settings]
Troubleshooting Account Protection for Auth0[Troubleshooting Accertify Account Protection for Auth0]
Sign-Up Screening Coverage for Auth0[Sign-Up Screening Coverage for Auth0]