PRODUCT KNOWLEDGE Flashcards
What are the use cases we support
B2B, B2C, B2E, Machine to Machine
What different user types does Auth0 have?
External and Internal
Describe an External User (B2C)
Anyone that logs in through a U/P, Social or Passwordless authentication
Describe an External User (B2B)
Anyone that authenticates through a federated source
Provide an example to the previous question
Azure AD
What are the different types of anomaly detection Auth0 has?
Brute force & Breached password detection
Where does anomaly happen in authentication flow ?
At login
Describe Brute Force Detection
Anyone that any one login in multiple times - if the credentials are wrong - user will be notified via email
Breached password
protects and notifies your users when their credentials are leaked by a data breach of a third party. You can optionally prevent access until the user has reset their password.
Describe an Internal user
Employee, Third party apps
How would you define monthly active users?
Any given calendar month, a person that logs in 1 time of 100 times is considered 1 unique monthly active user
How would you define SSO?
Ease of user security
Internal- prevents password fatigue, Does not have to remember multiple passwords
When someone ask you about SSO what is the first question you ask?
What other apps are they looking to sign into?
Give a real life example of SSO
Google- when you login to google its already logged into all google apps
What is MFA/2FA?
Second source of Auth/Extra layer of security
Why would someone see value in MFA?
Adds and extra layer of security to protect potentially sensitive account info/data
Where does MFA happen in the auth flow?
Login
What does Auth0 offer out of the box for MFA?
Google Authenticator, Duo (3rd party) Guardian (proprietary)
What features does Guardian MFA have?
SMS, Email, Push
Real life example
When you login to a site and they send you an access code via your email as an additional step to the login process to verify its you
What is our rules engine?
Customizes the authentication and authorization flow
Why would someone be interested in our Rules Engine?
Allows them to have more hands on field/they are able to use user enhancements and user control
Can you name 2 extensions?
Delegated admin, progressive profiling
Describe Delegated Admin
Allow to see dashboard, see the features but cant make changes