Limits for ext- Parameters in the Auth0 Login Redirect
Before your page redirects the user to the Auth0 /authorize endpoint, it attaches the collector's IDs as custom query parameters that start with ext-. Auth0 enforces the following limits on these parameters. The two Accertify IDs, deviceTransactionID and ubaID, fit well within them.
Auth0 Limits
Send ID References Only, Never Payload Data
Don't put device or behavioral payloads, such as devicePayload or ubaEvents, in ext- parameters. They are typically tens of kilobytes and won't fit the 255-character limit. Anything you attach here also passes through Auth0's infrastructure, so keep it to short, non-sensitive values.
Your collector already sends full payloads directly to Accertify. Accertify matches them to the login using the ID reference, so nothing else needs to travel through Auth0.
See also:
Passing Device and Behavioral IDs to Auth0 at Login[Passing Device and Behavioral IDs to Auth0 at Login]
Auth0 Overview[Accertify Account Protection for Auth0 Overview]