Auth0 Security Specialist

Comprehensive security skill for Auth0 implementations covering attack protection, multi-factor authentication, token security, sender constraining (DPoP/mTLS), and regulatory compliance (FAPI, GDPR, HIPAA).

Quick Reference

Security Feature Categories

Attack Protection:

• Bot Detection: CAPTCHA challenges for suspicious traffic
• Breached Password Detection: Blocks compromised credentials
• Brute Force Protection: Limits failed login attempts per account
• Suspicious IP Throttling: Rate limits high-velocity attacks

Multi-Factor Authentication:

• Push notifications via Auth0 Guardian
• One-time passwords (TOTP)
• WebAuthn with security keys and biometrics
• SMS/voice verification and Adaptive MFA