---
title: Account Protection Recommendations in Auth0
slug: public-apis/account-protection-recommendations-in-auth0
createdAt: 2026-11-02T15:08:19.911Z
---

::::ExpandableHeading
###

**Topic type: Reference**

:::hint{type="warning"}
**Purpose**: Defines the recommendations Accertify returns for Auth0 logins and sign-ups, and what each Action does with them.

**Audience**: Engineers, administrators, and security teams.

**Applies to**: The Post Login and Pre User Registration Actions.

**Does not apply to**: Event types that are integrated directly with Accertify outside of Auth0.
:::
::::

Once the Actions are live, Accertify scores each attempt in real time and returns a recommendation.

## At Login

:::ExpandableHeading
### Allow

Recommendation: `approve`.

The login continues with no visible change.
:::

***

:::ExpandableHeading
### Step-up MFA

Recommendation: `challenge`.

The user completes MFA before the login finishes.
:::

***

:::ExpandableHeading
### Deny

Recommendation: `deny`.

The login is blocked.
:::

***

:::ExpandableHeading
### Other

If Accertify returns a recommendation not listed above, the Action follows your `FAIL_OPEN` setting. It allows the login when `FAIL_OPEN` is `true` and denies it with `ap_unmapped` when `FAIL_OPEN` is `false`. It logs `unmapped recommendationCode`.
:::

***

## At Sign-Up

:::ExpandableHeading
### Allow

Recommendation: `approve`.

The account is created as normal.
:::

***

:::ExpandableHeading
### Deny

Recommendation: `deny`.

The sign-up is blocked and no account is created.
:::

***

## Tokens

:::ExpandableHeading
### Token Claims

Neither Action adds or changes ID token or access token claims, so risk results aren't exposed to the person being assessed.
:::



***

**See also**:

::::LinkArray{contentSource="CUSTOM"}
:::LinkArrayItem
[Account Protection Action Settings](docId\:CKmGRPHPq-gqQuJ6HwoY6)
:::

:::LinkArrayItem
[Troubleshooting Account Protection for Auth0](docId\:Dg8HEqC5LQhQrnuDsTOME)
:::

:::LinkArrayItem
[Sign-Up Screening Coverage for Auth0](docId:1qVbpSvIf1O-5b9WtSW77)
:::
::::