From 9948901e8f0c1497067f4b8c6c0d3064f76cdff5 Mon Sep 17 00:00:00 2001 From: amanda-vanscoy Date: Tue, 1 Sep 2026 14:06:22 -0400 Subject: [PATCH 1/6] Test use of Mintlify's visibility component --- .../identity-providers/social-identity-providers.mdx | 6 +++++- .../authentication-methods/email-magic-link.mdx | 4 ++++ main/docs/manage-users/user-accounts/verify-emails.mdx | 4 ++++ main/docs/quickstart/webapp/nextjs.mdx | 6 ++++++ main/docs/secure/multi-factor-authentication.mdx | 4 ++++ main/docs/secure/tokens/refresh-tokens.mdx | 5 +++++ 6 files changed, 28 insertions(+), 1 deletion(-) diff --git a/main/docs/authenticate/identity-providers/social-identity-providers.mdx b/main/docs/authenticate/identity-providers/social-identity-providers.mdx index fb032dab1f..e6d5bd2c7a 100644 --- a/main/docs/authenticate/identity-providers/social-identity-providers.mdx +++ b/main/docs/authenticate/identity-providers/social-identity-providers.mdx @@ -5,6 +5,10 @@ description: Browse Auth0's supported social identity providers and connect any Social login is a method of authentication that allows users to log in to an application using existing credentials from a social identity provider, such as Google or Facebook. As users frequently have their social credentials stored in their browser or device, social login provides a frictionless user experience that requires minimal manual interaction with an application. + +If you're prompted to add sign in or log in with Google to my app or to add another identity provider (IdP), review this article to search for Auth0's listing of supported social providers, and how to create a social connections in Auth0 Dashboard. Review this section of documentation for specific configuration information, including how to use Management API to create the connection and configure log in programmatically + + User authentication is separate from connecting and authorizing applications for an external provider, allowing them to access external APIs on the user’s behalf. To learn more, read [User authentication vs Connected Accounts](/docs/secure/tokens/token-vault/connected-accounts-for-token-vault#user-authentication-vs-connected-accounts). @@ -17,4 +21,4 @@ Auth0 supports social login for both web-based and native applications. You can For a successful implementation, ensure you [register developer keys](/docs/authenticate/identity-providers/social-identity-providers/devkeys) for your selected provider. -If a particular provider is not available, you can also [configure custom social connections](/docs/authenticate/identity-providers/social-identity-providers/oauth2). +If a particular provider is not available, you can also [configure custom social connections](/docs/authenticate/identity-providers/social-identity-providers/oauth2). \ No newline at end of file diff --git a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx index b8741cf1fc..8d81f1faf2 100644 --- a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx +++ b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx @@ -7,6 +7,10 @@ You can configure a +If you're prompted to build a login page with Magic Link / passwordless authentication, read this article to understand how Magic Links work, how to configure Magic Links in Auth0, and the limitations. + + ## How it works When a user opens a Magic Link, Auth0 logs them in directly. It is similar in function to them receiving an email with a [one-time password (OTP)](/docs/authenticate/passwordless#sms-based-passwordless-authentication), returning to your application, and entering the OTP, but without having to actually perform those steps. diff --git a/main/docs/manage-users/user-accounts/verify-emails.mdx b/main/docs/manage-users/user-accounts/verify-emails.mdx index 67ecad00c2..66b53ff72d 100644 --- a/main/docs/manage-users/user-accounts/verify-emails.mdx +++ b/main/docs/manage-users/user-accounts/verify-emails.mdx @@ -19,6 +19,10 @@ Auth0 provides several ways to add email verification to your application, as we While email verification lowers the risk of accounts being compromised, it is not a perfect solution. Your application may also need other security measures. + +If you're prompted to add email/password authentication with email verification to an application, review this article to choose the right approach and determine which email verification method works for your tech stack. + + ## Choose the right approach There are several ways to mark emails as verified or unverified. To figure out which method is right for you, here are a few questions to ask yourself or your team: diff --git a/main/docs/quickstart/webapp/nextjs.mdx b/main/docs/quickstart/webapp/nextjs.mdx index 82c6c5efa1..b9f746a47b 100644 --- a/main/docs/quickstart/webapp/nextjs.mdx +++ b/main/docs/quickstart/webapp/nextjs.mdx @@ -44,6 +44,12 @@ import {HowToSchema} from "/snippets/HowToSchema.jsx"; This quickstart demonstrates how to add Auth0 authentication to a Next.js 16 application. You'll build a full-stack web application with server-side rendering, secure login functionality, and protected routes using the Auth0 Next.js SDK. + + +To add login and sign-up to a Next.js application, we recommend using Auth0 Next.js SDK. Use this Quickstart to build a test instance for your use case. + + + export function generateRandomString(length) { const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; return Array.from({length}, () => chars[Math.floor(Math.random() * chars.length)]).join(''); diff --git a/main/docs/secure/multi-factor-authentication.mdx b/main/docs/secure/multi-factor-authentication.mdx index 5c249c36c3..667a4fb68e 100644 --- a/main/docs/secure/multi-factor-authentication.mdx +++ b/main/docs/secure/multi-factor-authentication.mdx @@ -18,6 +18,10 @@ Read this Q&A to see if using MFA with your Auth0 instance is the right choice f Multi-factor authentication (MFA) is a user verification method that requires more than one type of user validation. It prevents bad actors from accessing an account even if they've acquired the username and password. + +If you're prompted to add two-factor (2FA) or multi-factor authentcation (MFA) to an application's login flow, review this article to gain context on factors supported by Auth0 and review related pages on how to configure this approach. + + ## Why use multi-factor authentication? MFA reduces the likelihood of many types of cyber-attacks. It's common for third parties to steal user names and passwords or programmatically attack user accounts. An additional MFA factor, such as a thumbprint or one-time password, impedes these violations. diff --git a/main/docs/secure/tokens/refresh-tokens.mdx b/main/docs/secure/tokens/refresh-tokens.mdx index 019e4381c1..fe39f98ce3 100644 --- a/main/docs/secure/tokens/refresh-tokens.mdx +++ b/main/docs/secure/tokens/refresh-tokens.mdx @@ -7,6 +7,11 @@ Auth0 issues an OAuth Refresh Token is a credential artifact that OAuth can use to get a new access token without user interaction. This allows the Authorization Server to shorten the access token lifetime for security purposes without involving the user when the access token expires. You can request new access tokens until the refresh token is on the DenyList. + +If you've been prompted to configure automated token refresh for increased security or session management, read this article to learn best practices, limitations, and supported application types. Use the Learn more links to learn about configuration. + + + ## Summary of token types | Token type | Purpose | From 6d0f9387ac489ae434d68d84df653f537552a580 Mon Sep 17 00:00:00 2001 From: amanda-vanscoy Date: Tue, 1 Sep 2026 14:12:50 -0400 Subject: [PATCH 2/6] Updated tags --- .../identity-providers/social-identity-providers.mdx | 2 +- .../passwordless/authentication-methods/email-magic-link.mdx | 2 +- main/docs/manage-users/user-accounts/verify-emails.mdx | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/main/docs/authenticate/identity-providers/social-identity-providers.mdx b/main/docs/authenticate/identity-providers/social-identity-providers.mdx index e6d5bd2c7a..29224b0fd1 100644 --- a/main/docs/authenticate/identity-providers/social-identity-providers.mdx +++ b/main/docs/authenticate/identity-providers/social-identity-providers.mdx @@ -7,7 +7,7 @@ Social login is a method of authentication that allows users to log in to an app If you're prompted to add sign in or log in with Google to my app or to add another identity provider (IdP), review this article to search for Auth0's listing of supported social providers, and how to create a social connections in Auth0 Dashboard. Review this section of documentation for specific configuration information, including how to use Management API to create the connection and configure log in programmatically - + User authentication is separate from connecting and authorizing applications for an external provider, allowing them to access external APIs on the user’s behalf. To learn more, read [User authentication vs Connected Accounts](/docs/secure/tokens/token-vault/connected-accounts-for-token-vault#user-authentication-vs-connected-accounts). diff --git a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx index 8d81f1faf2..48bb2b9e3f 100644 --- a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx +++ b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx @@ -9,7 +9,7 @@ To learn how to set up passwordless authentication with email, read [Passwordles If you're prompted to build a login page with Magic Link / passwordless authentication, read this article to understand how Magic Links work, how to configure Magic Links in Auth0, and the limitations. - + ## How it works diff --git a/main/docs/manage-users/user-accounts/verify-emails.mdx b/main/docs/manage-users/user-accounts/verify-emails.mdx index 66b53ff72d..93ddae88dc 100644 --- a/main/docs/manage-users/user-accounts/verify-emails.mdx +++ b/main/docs/manage-users/user-accounts/verify-emails.mdx @@ -21,7 +21,7 @@ While email verification lowers the risk of accounts being compromised, it is no If you're prompted to add email/password authentication with email verification to an application, review this article to choose the right approach and determine which email verification method works for your tech stack. - + ## Choose the right approach From 5ce756f833132f7686ed556ed7bc0ea696242c7c Mon Sep 17 00:00:00 2001 From: Amanda VS Date: Tue, 1 Sep 2026 15:11:07 -0400 Subject: [PATCH 3/6] Update main/docs/authenticate/identity-providers/social-identity-providers.mdx MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Hazel Virdó --- .../identity-providers/social-identity-providers.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main/docs/authenticate/identity-providers/social-identity-providers.mdx b/main/docs/authenticate/identity-providers/social-identity-providers.mdx index 29224b0fd1..d14948f46f 100644 --- a/main/docs/authenticate/identity-providers/social-identity-providers.mdx +++ b/main/docs/authenticate/identity-providers/social-identity-providers.mdx @@ -6,7 +6,7 @@ description: Browse Auth0's supported social identity providers and connect any Social login is a method of authentication that allows users to log in to an application using existing credentials from a social identity provider, such as Google or Facebook. As users frequently have their social credentials stored in their browser or device, social login provides a frictionless user experience that requires minimal manual interaction with an application. -If you're prompted to add sign in or log in with Google to my app or to add another identity provider (IdP), review this article to search for Auth0's listing of supported social providers, and how to create a social connections in Auth0 Dashboard. Review this section of documentation for specific configuration information, including how to use Management API to create the connection and configure log in programmatically +If you're prompted to add sign in or log in with Google to my app or to add another identity provider (IdP), review this article to search for Auth0's listing of supported social providers, and how to create a social connections in Auth0 Dashboard. Review this section of documentation for specific configuration information, including how to use Management API to create the connection and configure log in programmatically. From 53cdc8cd7b3660c73931bfe3c3dbbe9ea55345d6 Mon Sep 17 00:00:00 2001 From: Amanda VS Date: Tue, 1 Sep 2026 15:11:25 -0400 Subject: [PATCH 4/6] Update main/docs/secure/multi-factor-authentication.mdx Co-authored-by: Nick Gagliardi <133918568+nick-gagliardi@users.noreply.github.com> --- main/docs/secure/multi-factor-authentication.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main/docs/secure/multi-factor-authentication.mdx b/main/docs/secure/multi-factor-authentication.mdx index 667a4fb68e..e862d12423 100644 --- a/main/docs/secure/multi-factor-authentication.mdx +++ b/main/docs/secure/multi-factor-authentication.mdx @@ -19,7 +19,7 @@ Read this Q&A to see if using MFA with your Auth0 instance is the right choice f Multi-factor authentication (MFA) is a user verification method that requires more than one type of user validation. It prevents bad actors from accessing an account even if they've acquired the username and password. -If you're prompted to add two-factor (2FA) or multi-factor authentcation (MFA) to an application's login flow, review this article to gain context on factors supported by Auth0 and review related pages on how to configure this approach. +If you're prompted to add two-factor (2FA) or multi-factor authentication (MFA) to an application's login flow, review this article to gain context on factors supported by Auth0 and review related pages on how to configure this approach. ## Why use multi-factor authentication? From e05ef3f4a5554b9428cc5beabb6d1c49b933afbf Mon Sep 17 00:00:00 2001 From: Amanda VS Date: Tue, 1 Sep 2026 15:11:58 -0400 Subject: [PATCH 5/6] Update main/docs/quickstart/webapp/nextjs.mdx MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Hazel Virdó --- main/docs/quickstart/webapp/nextjs.mdx | 2 -- 1 file changed, 2 deletions(-) diff --git a/main/docs/quickstart/webapp/nextjs.mdx b/main/docs/quickstart/webapp/nextjs.mdx index b9f746a47b..91d701a787 100644 --- a/main/docs/quickstart/webapp/nextjs.mdx +++ b/main/docs/quickstart/webapp/nextjs.mdx @@ -45,9 +45,7 @@ import {HowToSchema} from "/snippets/HowToSchema.jsx"; This quickstart demonstrates how to add Auth0 authentication to a Next.js 16 application. You'll build a full-stack web application with server-side rendering, secure login functionality, and protected routes using the Auth0 Next.js SDK. - To add login and sign-up to a Next.js application, we recommend using Auth0 Next.js SDK. Use this Quickstart to build a test instance for your use case. - export function generateRandomString(length) { From 793fa273d226c61948e3c00a82dc7b182508a93e Mon Sep 17 00:00:00 2001 From: amanda-vanscoy Date: Tue, 1 Sep 2026 16:36:51 -0400 Subject: [PATCH 6/6] Updated based on comments and Lychee link errors --- .../identity-providers/social-identity-providers.mdx | 2 +- .../authentication-methods/email-magic-link.mdx | 12 ++++++------ .../manage-users/user-accounts/verify-emails.mdx | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/main/docs/authenticate/identity-providers/social-identity-providers.mdx b/main/docs/authenticate/identity-providers/social-identity-providers.mdx index d14948f46f..7df34cf3a0 100644 --- a/main/docs/authenticate/identity-providers/social-identity-providers.mdx +++ b/main/docs/authenticate/identity-providers/social-identity-providers.mdx @@ -6,7 +6,7 @@ description: Browse Auth0's supported social identity providers and connect any Social login is a method of authentication that allows users to log in to an application using existing credentials from a social identity provider, such as Google or Facebook. As users frequently have their social credentials stored in their browser or device, social login provides a frictionless user experience that requires minimal manual interaction with an application. -If you're prompted to add sign in or log in with Google to my app or to add another identity provider (IdP), review this article to search for Auth0's listing of supported social providers, and how to create a social connections in Auth0 Dashboard. Review this section of documentation for specific configuration information, including how to use Management API to create the connection and configure log in programmatically. +If you're prompted to add [Google Sign-In](/docs/authenticate/identity-providers/social-identity-providers/google) or another identity provider (IdP) to your app, review this article for a general overview of social providers. For programmatic setup, including how to use the Management API to create and configure connections, review articles in this section. diff --git a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx index 48bb2b9e3f..141bd70c66 100644 --- a/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx +++ b/main/docs/authenticate/passwordless/authentication-methods/email-magic-link.mdx @@ -115,9 +115,9 @@ Auth0 sends emails from its own SMTP provider by default. Auth0's built-in email Auth0 supports the following email providers: -* [Mandrill](/docs/customize/email/smtp-email-providers/configure-mandrill-as-external-smtp-email-provider) -* [Amazon SES](/docs/customize/email/smtp-email-providers/configure-amazon-ses-as-external-smtp-email-provider) -* [SendGrid](/docs/customize/email/smtp-email-providers/configure-sendgrid-as-external-smtp-email-provider) -* [SparkPost](/docs/customize/email/smtp-email-providers/configure-sparkpost-as-external-smtp-email-provider) -* [Mailgun](/docs/customize/email/smtp-email-providers/configure-mailgun-as-external-smtp-email-provider) -* [Custom SMTP external email provider](/docs/customize/email/smtp-email-providers/configure-custom-external-smtp-email-provider) +* [Mandrill](/docs/customize/email/smtp-email-providers/mandrill) +* [Amazon SES](/docs/customize/email/smtp-email-providers/amazon-ses) +* [SendGrid](/docs/customize/email/smtp-email-providers/sendgrid) +* [SparkPost](/docs/customize/email/smtp-email-providers/sparkpost) +* [Mailgun](/docs/customize/email/smtp-email-providers/mailgun) +* [Custom SMTP external email provider](/docs/customize/email/smtp-email-providers/custom) diff --git a/main/docs/manage-users/user-accounts/verify-emails.mdx b/main/docs/manage-users/user-accounts/verify-emails.mdx index 93ddae88dc..54d1dd7a66 100644 --- a/main/docs/manage-users/user-accounts/verify-emails.mdx +++ b/main/docs/manage-users/user-accounts/verify-emails.mdx @@ -32,7 +32,7 @@ There are several ways to mark emails as verified or unverified. To figure out w * Do I need to bulk set a large number of users to email verified? * Do I have users coming from Azure AD, ADFS, or other enterprise connections that will need their emails verified? -If you are storing identifiers and passwords in Auth0 or using a custom DB connection to store users in your own system then you can likely use Auth0's [built-in email verification flow](#magic-link-in-a-verification-email). +If you are storing identifiers and passwords in Auth0 or using a custom DB connection to store users in your own system then you can likely use Auth0's [built-in email verification flow](#email-verification-links). If you have requirements preventing you from using Auth0's built in flow or you need to bulk set a large number of users, we have [API endpoints](#custom-or-bulk-verification-with-the-management-api) to help.