---
title: Auth0 Overview
slug: public-apis/auth0-overview
createdAt: 2026-11-02T15:08:19.784Z
---

::::ExpandableHeading
###

**Topic type: Concept**

:::hint{type="warning"}
**Purpose**: Explains how Accertify Account Protection adds a risk decision to Auth0 logins and new account sign-ups, and what you and Accertify each manage.

**Audience**: Engineers, administrators, and security teams evaluating or implementing the Auth0 integration.

**Applies to**: Accertify Account Protection for Auth0, including the Post Login and Pre User Registration Actions.

**Does not apply to**: Event types that are integrated directly with Accertify outside of Auth0, such as account updates.
:::
::::

Accertify Account Protection adds a real-time risk decision to Auth0 logins and new account sign-ups. It uses the device and behavioral signals that the Accertify collector already gathers on your own pages. 

- For each login, Accertify recommends allowing, challenging with MFA (step-up), or denying. 
- For each sign-up, Accertify recommends approving or denying. 

Setup requires a small code change on your side and a Marketplace install in Auth0.

## How It Works

Account Protection uses two Auth0 Actions:

- A Post Login Action screens every login.
- A Pre User Registration Action screens new account sign-ups before the account is created.

Both work the same way, described here for login. Your login page keeps doing what it does today. The Accertify collector gathers device and behavioral signals and sends them directly to Accertify. When the user signs in, your page passes short ID references to Auth0, and the Accertify Action uses those IDs to request a risk decision before the login completes.

![How it works](https://api.archbee.com/api/optimize/C_ua77kdJRrVi_Gd-0NCF/6OuRGwkgvY1Bc5sb0Ifed_howitworks.png "How it works")

Only short ID references pass through Auth0. Full device and behavioral data travels on the collector's existing direct channel to Accertify.

## What You Manage

- The Accertify collector on your own login and sign-up pages, as it runs today.
- Small changes to your login redirect and sign-up request so they pass the collector's IDs to Auth0.

## What Accertify Provides

A Post Login Action and a Pre User Registration Action, installed from the Auth0 Marketplace, that call Accertify and enforce the decision. You never copy, paste, or maintain the Action code. Accertify keeps the Marketplace listing up to date.

## Why the Collector Stays on Your Page

Auth0 Actions can't add browser JavaScript to your login page or to Auth0's hosted login page. This is an Auth0 platform limitation, so the collector always runs on a page you control.

## Other Event Types

Your Account Protection contract may include other event types, such as account updates. These are integrated with Accertify directly, outside of Auth0. Accertify combines every event with your Auth0 logins and sign-ups, so you see a full picture of each user in the Account Protection portal.



***

**See also**:

::::LinkArray{contentSource="CUSTOM"}
:::LinkArrayItem
[Prerequisites for Auth0 and Account Protection](docId\:eRzmVbOwVV2hPdcncE3tb)
:::

:::LinkArrayItem
[Passing Device and Behavioral IDs to Auth0 at Login](docId:08m0hPxV6mwayd4ZUC1B0)
:::

:::LinkArrayItem
[Account Protection Recommendations in Auth0](docId\:v0lnnu9s6yJFlhDN_HQ5M)
:::
::::