shiven_ramji

Shiv is an experienced product executive and builder obsessed with creating beautiful products. He is the President of Customer Identity at Okta, managing a $1B ARR business and overseeing the company’s product, data, security, and technology strategy and execution. Before Auth0 and Okta, Shiv was the SVP of Product at DigitalOcean, leading DigitalOcean’s products, pricing, and partnerships. Additionally, Shiv has held product leadership positions at global brands, including Amazon, NBCUniversal, LiveIntent, and The Nielsen Company. Shiv was the recipient of the 2023 Top Global CPO Award by the Products That Count community. 

Beyond his current corporate focus, Shiv is deeply committed to fostering entrepreneurship and innovation, particularly in Africa. He is an active angel investor and startup advisor and also serves on the boards of [Products That Count](https://productsthatcount.com/) and [Aiven.io](http://Aiven.io).

President, Auth0

Shiven Ramji

Learn how Auth for GenAI helps secure your GenAI apps. Join the waitlist to be the first to know when Auth for GenAI is available in Developer Preview

## The Future is Generative AI

Generative AI has exploded over the past year with the experimentation and adoption of LLMs. The Generative AI industry will continue to grow exponentially, with citing the 2022 market size of $40 billion could grow to $1.3 trillion over the next 10 years. ([Bloomberg Intelligence](https://www.bloomberg.com/company/press/generative-ai-to-become-a-1-3-trillion-market-by-2032-research-finds/), 2023).

This accelerated growth can also be seen in open source. Github reported that between 2023 and 2024, there were over 137,000 new public Generative AI projects on their platform—a 98% growth increase in just one year. ([Github, 2024)](https://github.blog/news-insights/octoverse/octoverse-2024/) The signs clearly show increased developer interest and understanding of Generative AI's positive impact on application features and on helping developers build applications.

![The Future is Generative AI](https://images.ctfassets.net/23aumh6u8s0i/7sio95pOa43dIveUc5ld58/3b86b8377a0a48e6a494b4aa61ab5840/Uploaded_from_Auth0_Announces_Auth_for_GenAI)
<center>[Github, 2024](https://auth0.com/resources/whitepapers/broken-auth-checklist)</center>

> This increased interest and understanding is rapidly materializing into an explosion of [an ecosystem of agents](https://x.com/JayaGup10/status/1852148821389934921), proving that enterprises and start-ups across industries are betting on agents to drive efficiency, innovation, and growth.

![The Future is Generative AI](https://images.ctfassets.net/23aumh6u8s0i/5LJCgBgJdPZTBJzddd0BMm/34543b922f17186be537fc2f27cd1611/Uploaded_from_Auth0_Announces_Auth_for_GenAI)
<center>[Jaya Gupta](https://x.com/JayaGup10) on X post (10/31/24)</center>


For some time, LLMs have proven valuable in assisting developers by automating repetitive coding tasks, improving productivity, and saving time. However, the growth of Generative AI extends far beyond LLMs. We’re starting to see the emergence of interconnected AI programs that integrate into our applications and act autonomously on our behalf to optimize how we work and reduce time to value. For example, Salesforce has announced [Agentforce](https://www.salesforce.com/in/agentforce/), an AI agent solution providing customers and employees with specialized, always-on customer success capabilities. (Salesforce, 2024) Also, [crew.ai](https://www.crewai.com/) is a wholly dedicated platform for implementing and managing multi-agent workflows, and frameworks like [Langchain](https://www.langchain.com/agents) are bringing agents to the forefront. (CrewAI, 2024; Langchain, 2024) These are just a few examples of this bet on agents coming to fruition.  

## Introducing Auth for GenAI

We are excited to announce **Auth for GenAI**, an upcoming Auth0 product for developers building applications with Generative AI, like chatbots and AI agents. This capability will enable developers to confidently work alongside these chatbots and AI agents to build easily and securely.<br><br>
We have been working with experts, experimenting, and watching the industry closely to identify four requirements for successfully and securely building GenAI into your applications where identity is crucial. Auth for GenAI aims to solve all four requirements, helping development teams make their Generative AI apps production ready.

* **Authenticate Users:** User Authentication remains essential because Generative AI agents or applications still need to know who the user is.
* **Call APIs on Users’ Behalf:** AI agents connect to far more apps than a typical web application. However, agents don't need user interfaces; they only need APIs. As Generative AI apps integrate with more products, calling APIs on behalf of those users will become critical.
* **Authorization for Retrieval Augmented Segmentation (RAG):** Almost all Generative AI applications use RAG and feed information to AI models from multiple systems. To avoid sensitive information disclosure, all data fed to AI models must be data the user has permission to access.
* **Async Interactions:** AI agents may take hours or days to complete tasks or wait for complex conditions to be met. In those cases, humans will not wait for the AI agent to respond in front of a chat window.

Auth for GenAI will address those challenges through the following features:

![Introducing Auth for GenAI](https://images.ctfassets.net/23aumh6u8s0i/5cR0564CRig0U5VX1fbUY1/79b69a82945e04444ba409edd64b3f6b/Uploaded_from_Auth0_Announces_Auth_for_GenAI)

Head to [Oktane on Demand](https://www.okta.com/oktane/2024/sessions/keynote-secure-engaging-developer-friendly-customer-identity-its-possible/) to watch the Keynote from Oktane this year- “Secure, Engaging, Developer-Friendly Customer Identity,” where we announced Auth for GenAI and showed a demo.

## Join the** [Waitlist](http://auth0.ai/) Now!

Head to [demo.auth0.ai](http://demo.auth0.ai/) to try the demo. If you want to be the first to know when Auth for GenAI is available for Early Access, join the waitlist at [auth0.ai](http://auth0.ai/). The code is also open source and is available on [Github](https://github.com/auth0-lab/market0) for immediate access.

We look forward to seeing what you will build with Auth for GenAI.

Auth0 Announces Auth for GenAI

Abbie Carlson

As a Product Marketing Manager, I'm responsible for communicating the value of Identity for consumer apps as well as focusing on the developer experience. I'm forever curious about how Identity plays a role in our everyday lives as consumers and how a great Customer Identity solution can make or break a business through patron loyalty and retention. 

Outside of work can catch me watching Seattle sports, going to as many concerts as I can or listening to true crime podcasts.

Senior Product Marketing Manager - Developer Experience & Analytics

Keep scrolling to learn more about our newest releases, updates, and all things developer.

As builders and developers, you know how quickly the Identity landscape can change and pivot. And here at Auth0, we’re right there with you. To be in the loop, you gotta always be two steps ahead.

You’re shaping the future of Identity as you build and scale your app. You’re adding to open-source projects to support the wider good. And you’re learning as you go and adopting new standards to stay on top of it all.

With that, we want to share some new and updated releases that can help you continue to grow, support, and learn in this ever-changing Identity world.

[**Auth0 Plans Just Got an Upgrade**](https://auth0.com/blog/auth0-plans-got-an-upgrade/) 🎉 Auth0’s vision is to free any consumer or SaaS application user to safely use any technology. This means giving developers the products that help make building, deploying, and scaling applications easy. In the last few years, we’ve added more capabilities that allow developers to battle malicious attacks and attackers.

We’re happy to bring you more on our Free, Essential, Professional, and Enterprise Plans. A few highlights to mention- the Free Plan now includes 25,000 MAUs and a Custom Domain. 10 Organizations are now available on our B2C Plans and Unlimited[^1] Organizations on our B2B Plans as well as increased MFA offerings so you can mitigate the growing threat of AI-based attacks.

![Free plan](https://images.ctfassets.net/23aumh6u8s0i/sFytL92hG7PJErfIvOoJc/c6facc7de0415a1b8db32b206809b457/Uploaded_from_Staying_up_to_date_in_Identity__Auth0_s_Q3_Developer_Releases)

_These are just our Free Plan updates. Take a look at our [blog](https://auth0.com/blog/auth0-plans-got-an-upgrade/) to learn more about the plan changes._

[**Forms**](https://auth0.com/docs/customize/forms) ✨ Frictionless sign-up and login experiences are crucial for winning over customers and staying competitive. Today's businesses need tools that support efficient and secure operations but also help drive customer retention and growth, adapt to unique security needs, and unify and activate data across multiple apps and systems.

Forms enables developers and UX teams to streamline orchestration and create custom Identity flows tailored to their company's needs. This flexibility helps you build a more seamless user experience.

![Dashboard > Actions > Forms](https://images.ctfassets.net/23aumh6u8s0i/58pMHDbyfqe0thBPLzu4ij/5a4ac70a7a9be3d280b9dc4945158061/Uploaded_from_Staying_up_to_date_in_Identity__Auth0_s_Q3_Developer_Releases)

**What’s Next? Auth for GenAI** 🤖 Auth for GenAI is a series of features that allows you to confirm that your AI agents have the right and least privileged access to sensitive information. In addition, Auth for GenAI can call APIs securely on behalf of users to integrate with other apps and is capable of securely implementing on-demand user authentication when background or async AI agents need user confirmation for actions.

![auth0.ai](https://images.ctfassets.net/23aumh6u8s0i/FumWILM0KMtXGUdXuZxYw/0cc2ccf921997f0f0d3802f3dfdd8dd0/Uploaded_from_Staying_up_to_date_in_Identity__Auth0_s_Q3_Developer_Releases)

Interested? Join our waitlist [here](http://auth0.ai/) to be the first to find out when these features become available.

We hope that these product updates and releases support you in this ever-changing world of Identity and security. If you’d like to learn more about our other updates and releases (we’ve got a lot more to tell you about), take a look at our [Developer Releases Guide](https://www.okta.com/resources/datasheet-developer-releases-auth0-by-okta-q3-2024/). And if you’d like to dive even deeper, please check out our combined [Customer Identity and Workforce Identity Release Guide](https://www.okta.com/resources/product-release-overview-q3-2024-wic-cic/).

Outside of all these release updates, take a look at our developer resources at [www.developer.auth0.com](http://www.developer.auth0.com/).

[^1] : _subject to system limitations_

Staying up to date in Identity… Auth0’s Q3 Developer Releases

auziros:jeana-tahnk

Jeana has been in the tech industry for 15+ years, both as a communications professional and writer. As Director of Global Communications at Auth0, she works with her internal team and external agencies to amplify the company's visibility worldwide and establish its leadership in the identity industry. When she is not working, she can most likely be found on a field watching one of her three kids playing sports, or cleaning up after her one-year-old retriever who chews everything.

Senior Director, Global Communications

Jeana Tahnk

Industry veteran Jennifer Ceran joins Board; Auth0 adds new VPs to bolster leadership



**BELLEVUE, Wash. – May 13, 2020 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced that [Jennifer Ceran](https://www.linkedin.com/in/jenniferceran/) has joined its Board of Directors. Ceran has more than three decades of technology and SaaS industry experience and will serve as an integral member as Auth0 continues its exciting growth. As CFO of Smartsheet, a modern SaaS work execution platform, Ceran leads the Finance, Procurement, IT, Facilities/Real Estate, and Operational Excellence efforts, and was instrumental in Smartsheet’s successful IPO in April 2018. She will also serve as the chair of Auth0’s Audit Committee. 

“We are honored to welcome Jenny to our board, and look forward to her counsel as a trusted advisor to our company,” said Eugenio Pace, Auth0 CEO, and co-founder. “Her experience at Smartsheet will be invaluable in adding to the incredible diversity of thought that is represented across our Board of Directors.” 

“The opportunity to serve on Auth0’s Board represents a highlight in my career and one that I am very excited to dive into. Auth0’s success and future potential are undeniable,” said Ceran. “I greatly respect Eugenio, the senior leadership team, and the rest of the board members, and look forward to working collaboratively to guide Auth0 on its next stage of growth.”

In addition, Auth0 announced the appointment of three prominent executives to its leadership team: 

* [**Holly Files**](https://www.linkedin.com/in/hollyfiles/) joined as Senior Vice President of Customer Success to enable customers’ business goals through product utilization and business transformation, and extend Auth0’s mission of putting the customer first. She was previously GVP of Customer Success at New Relic. 
* [**Cassio Sampaio**](https://www.linkedin.com/in/csampaio/) joined as Vice President of Product and will drive Auth0's product  roadmap to continue delivering innovation towards the needs of application builders. He was previously Director of Business Operations (Cloud Infrastructure) at Apple. 
* [**Ken Oestreich**](https://www.linkedin.com/in/kenoestreich/) joined as Vice President of Product Marketing and is responsible for corporate positioning, product introductions, and driving adoption of the Auth0 platform. He was previously VP of Product Marketing at WSO2. 

“To support Auth0’s rapid growth, we continually seek the brightest minds and experts within their respective domains to contribute deep knowledge to our organization,” added Pace. “Holly, Ken, and Cassio offer incredible expertise and immediately add value to Auth0 as a world-class organization.” 

<include src="asides/AboutAuth0" />

### Media Contacts
Jeana Tahnk<br>
Corporate Communications<br>
Auth0<br>
[jeana.tahnk@auth0.com](mailto:jeana.tahnk@auth0.com)

Hannah Carroll<br>
Matter for Auth0<br>
[auth0@matternow.com](mailto:auth0@matternow.com)


Auth0 Board of Directors Welcomes Smartsheet CFO as New Member

Auth0’s inaugural user conference will be held August 26-27, 2020 in San Francisco



<div class="alert alert-success alert-icon">
    <i class="icon-budicon-500"></i>
    <strong>An Important Message from Auth0</strong><br>
    <p>The health and well being of the application builder community &mdash; and all humans &mdash; is the most important thing to Auth0. Due to the COVID-19 pandemic, we don’t feel we can offer the high-level experience you deserve. Therefore, we have made the <strong>difficult decision to cancel Auth0 Assemble 2020</strong>.</p>
</div>

**BELLEVUE, Wash. – January 15, 2020 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced [Auth0® Assemble – The Identity Conference for Application Builders™](https://assemble.auth0.com/?utm_source=ASM_PressRelease&utm_medium=sc&utm_campaign=ASM_WebTraffic), the company’s first customer and developer conference designed for application builders who want to architect the future, build community, celebrate developer culture, and cultivate identity skills. Auth0 Assemble will take place in the heart of the Bay Area at the Hyatt Regency San Francisco on August 26-27, 2020. 

Attendees can register now to receive the latest updates on Auth0 Assemble 2020 ticket sales, which will be publicly available in February 2020. The first 100 people to sign up at [assemble.auth0.com](https://assemble.auth0.com/?utm_source=ASM_PressRelease&utm_medium=sc&utm_campaign=ASM_WebTraffic) will receive advanced access to ticket sales and special ticket savings. 

Auth0 Assemble will bring together a diverse group of 500+ developers, enterprise architects, product managers, and security and identity professionals for two days of education, networking, and engaging experiences. The two-day event will include compelling keynote presentations and sessions around four primary themes:

- “Software is eating the world" – explore how developers are the new decision-makers and are leading organizational efforts to deliver customer value
- Identity strategy foundations and best practices for application development
- The future of applications and the journey from continuous delivery to continuous assembly
- How to protect your greatest assets, your users, and take action to make the internet safer

These focus areas will serve as highly-engaging and educational ways for application builders to continue learning about the ever-changing world of identity management. 

“Auth0 Assemble will be a gathering of great minds, seeking something incredible, innovative, and disruptive within the identity industry,” said Eugenio Pace, CEO and co-founder of Auth0. “From the day we started the company we dreamt about organizing an awesome conference for app builders. This event has been years in the making, and we are thrilled that it will take place later this year. We promise attendees a robust line-up of developers, visionaries, leaders, and practitioners who are extremely passionate about building secure, scalable applications. It’s sure to be a very exciting event.”

Stay tuned for additional conference updates and join the conversation by following Auth0 Assemble at [@Auth0Assemble on Twitter](https://twitter.com/auth0assemble) or using [#Auth0ASM](https://twitter.com/search?q=%23Auth0ASM&src=typed_query).

<include src="asides/AboutAuth0" />

### Media Contacts

Kaycie East<br>
Auth0 Communications<br>
[press@auth0.com](mailto:press@auth0.com) 
 
Alexandria Plew<br>
Matter for Auth0<br>
[auth0@matternow.com](mailto:auth0@matternow.com)


Auth0 Assemble to be The Identity Conference for Application Builders

FlexJobs and Built In Seattle recognize Auth0 for industry-leading perks, benefits, and remote-friendly culture



**BELLEVUE, Wash. – January 21, 2020 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced it has been included on [FlexJobs’ annual list of ‘Top 100 Companies to Watch for Remote Jobs in 2020'](https://www.flexjobs.com/blog/post/100-top-companies-with-remote-jobs-2020/) and [Built In Seattle’s list of ‘Best Places to Work in 2020'](https://www.builtinseattle.com/companies/best-places-to-work-seattle-2020), both of which recognize Auth0 for its flexible, remote-friendly culture, and commitment to providing its employees with the best benefits and perks. 

Based on an analysis of more than 54,000 companies and their remote job posting histories in the FlexJobs database in 2019, Auth0 – along with companies like Amazon, Aetna, JPMorgan Chase, Dell, and Salesforce – had the highest number of remote job openings on the FlexJobs site last year. The number of people telecommuting in the U.S. has dramatically increased by [159 percent](https://www.flexjobs.com/blog/post/flexjobs-gwa-report-remote-growth/) since 2005, with remote work bringing very real benefits to both employers and workers, such as greater work-life balance, wider talent pool, higher productivity, stronger retention rates, and much more.

Auth0 was also recognized for its top employee perks and benefits on Built In Seattle’s list of Best Places to Work in 2020. Built In's ‘Best Places to Work’ list rates companies based on their employer benefits and employee submitted compensation data. 

“We pride ourselves on being a company that enables our team members to do their best work – regardless of location – at a global scale,” said Eugenio Pace, CEO, and co-founder of Auth0. “Our inclusion on the FlexJobs and Built In Seattle lists is a reflection of our dedication to providing the best culture and work-life balance for our team that spans more than 33 countries, and we’re honored for the recognition.”

Auth0 is dedicated to creating a work environment that centers around collaboration, communication, and culture. Inclusion in these listings is continued validation of this dedication and follows other ‘best places to work’ recognition, including [Inc. Magazine’s Best Workplaces 2019](https://auth0.com/blog/auth0-recognized-as-one-of-inc-magazines-best-workplaces-2019/) and Battery Ventures’ [50 Highest Rated Private Cloud Computing Companies To Work For](https://auth0.com/blog/auth0-named-one-of-50-highest-rated-private-cloud-computing-companies-to-work-for/). 

Auth0 provides a competitive total rewards package including (but not limited to): 401(k) matching, flexible paid vacation time, career development opportunities and training, competitive parental leave, diversity and inclusion initiatives, top of the line gear, an annual company-wide offsite, and other flexible and generous practices. For current job opportunities, please visit [https://auth0.com/career](https://auth0.com/careers). 

## About FlexJobs
[FlexJobs](https://www.flexjobs.com/) is a premium online job service for professionals seeking flexible work, specializing in full-time and part-time remote jobs, employee and freelance jobs, and on-site jobs with flexible, part-time, and alternative schedules. Since its start in 2007, FlexJobs has helped more than 4 million people in their job searches and has created the largest vetted database of legitimate flexible job opportunities in over 50 career categories. Besides, FlexJobs provides robust career support, including curated expert resources and career coaching services, to partner with job seekers in all phases of their journey. A trusted source in the media, FlexJobs has been cited in top national outlets such as CNN, Wall Street Journal, New York Times, CNBC, Forbes, and many others. FlexJobs' Founder & CEO Sara Sutton has also launched two additional partner sites, [Remote.co](http://remote.co/) and [1 Million for Work Flexibility](http://www.workflexibility.org/), to help provide education and awareness about the viability and benefits of flexible work. Sutton is the creator of [The TRaD* Works Forum (Telecommuting, Remote, & Distributed)](https://trad.works/), dedicated to helping companies leverage the benefits of telecommuting, remote and distributed teams.

## About Built In
Working in tech is a way of life. Built In helps people live it with purpose. Across the most vibrant tech hubs in the US, Built In helps tech professionals stay on top of tech news and trends, expand their networks and carve out futures at companies they believe in. Built In attracts a niche audience of 1 million tech professionals every month and, in 2019, the company hit a milestone, serving 1,100 companies annually. Built In recently launched BuiltIn.com, a national hub for tech trend coverage and resources to help professionals grow in their careers.

<include src="asides/AboutAuth0" />

### Media Contacts
Kaycie East<br>
Auth0 Communications<br>
[press@auth0.com](mailto:press@auth0.com) 
 
Alexandria Plew<br>
Matter for Auth0<br>
[auth0@matternow.com](mailto:auth0@matternow.com)


Auth0 Honored for Excellent Workplace Culture in Two Industry ‘Best of’ Lists

Sporting goods retailer’s commitment to constant digital innovation drives enhanced login


**BELLEVUE, Wash. – December 11, 2019 –** The [Auth0](https://auth0.com/) Identity Platform, a product unit within Okta, today announced that it has been selected by DICK’S Sporting Goods, a leading omnichannel sporting goods retailer, to provide a superior customer login experience for every customer (‘athlete’) who interacts with the online brand. Auth0 will power the login experience for DICK’S digital properties  – website and mobile – and enable athletes to access information and merchandise with even more ease and security than before. 

DICK’S is a leading omnichannel sporting goods retailer that offers an extensive assortment of authentic, high-quality sports equipment, apparel, footwear, and accessories. Headquartered in Pittsburgh, PA, DICK’S caters to millions of athletes’ sporting goods needs on its digital website, [www.dickssportinggoods.com](http://www.dickssportinggoods.com). This past year, DICK’S embarked on a digital transformation project that included identity management as a critical component. 

In addition to implementing [Single Sign On](https://auth0.com/single-sign-on/), they also wanted to have a modern identity solution that offers leading-edge options, such as passwordless authentication. 

“Our athletes and their experience on our digital properties is one of the most important factors in retaining our loyal fan base and continuing to expand our business to new audiences,” said Bob Pecina, VP of Technology, DICK’S. “After a solid review of solutions on the market, Auth0 provided us with the ease-of-use and scalability we were looking for in an identity management solution. They could also achieve our time-to-market goals, which was a deciding factor with the upcoming holiday season.” 

DICK’S will roll out new login features across its digital brands in the next few months and continue to leverage Auth0’s many product features to continually enhance the user experience. 

“Working with DICK’S and the scale in which they need to support their massive fan base is so exciting, and is certainly something our platform is designed to handle,” said Ghazi Masood, VP of Americas for Auth0. “We are especially thrilled to support DICK’S during this holiday season, and provide its loyal athletes with the ability to digitally access what they need as easily and securely as possible.” 

Auth0 is proud to help DICK’S and other major enterprises stay ahead of the competition by creating a better login experience. For more information about [Auth0’s customers](https://auth0.com/customers), please visit the company’s website. 

<include src="asides/AboutAuth0" />

### Media Contacts

Kaycie East<br>
Auth0 Communications<br>
[press@auth0.com](mailto:press@auth0.com)

Alex Plew<br>
Matter for Auth0<br>
[auth0@matternow.com](mailto:auth0@matternow.com) 


DICK’S Sporting Goods Turns to Auth0 for Industry-Leading Login Experience

99c4080f412ccf46b9b564db7f482907?s=200 avatar

99c4080f412ccf46b9b564db7f482907?s=200

I'm currently a Senior Developer Advocate at MongoDB. I'm also a Google Developer Expert for Web Technologies and spend most my time giving talks at conferences and meetups, mentoring developers and running workshops, and creating online content to help technology professionals.

Former Auth0 Employee

Ado Kukic

Dr. Werner Vogles, CTO of AWS, had just a few announcements but they were some of the most exciting ones. Read on to find out what they were.



At AWS re:Invent 2017, Amazon showed their cards for the next year and doubled down on providing an "everything platform" for developers. Key services included serverless computing, containers, machine learning, and IoT. Day four was led by CTO of AWS, Dr. Werner Vogles, and he had some very exciting announcements. Let's dive right in. 

## Announcement: AWS Cloud9

[AWS Cloud9](https://aws.amazon.com/cloud9/) is a cloud-based IDE that is going to allow developers to build, debug, and deploy applications directly in the AWS management console. If the name Cloud9 seems familiar, it is the name of a cloud-based IDE that Amazon acquired last year. AWS Cloud9 brings a powerful integrated developer environment with deep integration into the AWS ecosystem and an improved developer experience, allowing for easy pair programming, sharing of code, code reviews, and much more.

![AWS Cloud9](https://images.ctfassets.net/23aumh6u8s0i/5NZ6GK1s3jVM2kitCe1WIa/5419d1064640a18fcc51eecc7e55f2a7/cloud9)

What developers are excited about is no longer having to set up a local development environment. They can access all of their code from the browser and have a very consistent experience. From my brief time playing with AWS Cloud9, I really enjoyed the experience and am looking forward to spending more time with it.

## Announcement: Alexa for Business

Alexa and the Amazon Echo are ushering in a new era of computer interaction with just your voice. The product has been very successful so far and Amazon has a whole suite of Echo devices now ranging from the original, mini, on tap, as well as third party devices integrating Alexa functionality. Alexa has personally taken over my home with four devices spread throughout different parts of my house.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Introducing Alexa For Business: <a href="https://t.co/zD2ALbcwoy">https://t.co/zD2ALbcwoy</a> <a href="https://twitter.com/hashtag/reinvent?src=hash&amp;ref_src=twsrc%5Etfw">#reinvent</a></p>&mdash; Matt Wood (@mza) <a href="https://twitter.com/mza/status/936279344669847552?ref_src=twsrc%5Etfw">November 30, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>


[Alexa for Business](https://aws.amazon.com/alexaforbusiness/) is aiming to take the success that the Echo has had in the consumer space and adapt it to the office. Integrations with conference room hardware and software, corporate device management for the hardware, and other features will make it easy for businesses to add Echo devices in the workplace. I am curious to see if businesses will adopt it. 

## Announcement: AWS Lambda

Amazon is betting big on its serverless framework [AWS Lambda](https://aws.amazon.com/lambda/) and for good reason. Its usage is growing tremendously and it is solving many use cases for organizations within the AWS ecosystem. Today, Dr. Vogles had five new announcements for AWS Lambda.

![AWS Lambda announcements](https://images.ctfassets.net/23aumh6u8s0i/1h43YY8nlxj5YVzfMwRDBP/de56d516f5e7f7961a3985ade0234169/lambda-announcements)

* **API Gateway VPC integration**.
* **Concurrency controls**.
* **3GB Memory support**.
* **.NET Core 2.0 language support**.
* **Go(lang) support**.

I literally jumped for joy when I saw that last one. I can't wait for native Go support in AWS Lambda. If you are interested in [learning more about Go, check out this tutorial](https://auth0.com/blog/authentication-in-golang/) I wrote on building Go APIs and adding authentication to them.

## Session: Identity Management for Your Users and Apps: A Deep Dive on Amazon Cognito

[Amazon Cognito](https://aws.amazon.com/cognito/) is getting some advanced security features, and this session offered a deep dive into what's new and how it works. The new features that Cognito is getting include passwordless authentication, anomaly detection, breached password detection, and multifactor authentication. We at Auth0 also provide [multifactor authentication](https://auth0.com/multifactor-authentication), [breached password detection](https://auth0.com/breached-passwords), and [anomaly detection](https://auth0.com/docs/anomaly-detection) so I was very curious to see how our technology stacked up.

Overall, I left impressed with the new capabilities of Cognito. They are making great strides in offering AWS developers the tools to better secure their users' identity and that, to me, is always a win. I'm sure I will get the Auth0 vs Cognito question, and of course, my answer will be a little (or very) biased, but I really think it's great that Amazon is adding these advanced security features as it validates the hard work our engineering team is doing every day. That's all I'll say on that topic. :)

## Session: Amazon Macie: Data Visibility Powered by Machine Learning for Security and Compliance Workloads

[Amazon Macie](https://aws.amazon.com/macie/) is a machine-learning service used to discover, classify, and protect sensitive data. Think about how many developers check in code to public GitHub repos with access and secret keys embedded in the code. Macie tries to identify issues like this, but is not limited to just secret keys; it can be used to identify PII, business-critical data, or other forms of sensitive data.

![AWS Macie](https://images.ctfassets.net/23aumh6u8s0i/CoPgeJtqmcbzNzks826k5/796d54360dac4e45bf96028ea156e098/macie)

This session focused on how you can use Amazon Macie to monitor and identify when your applications are potentially leaking sensitive information so that you can act on that data. Ajit Zadgaonkar from Edmunds shared real-world scenarios and use cases where Macie is used in production and how it helps Edmunds run a much tighter ship.

## Aside: Auth0 and AWS

If you are using AWS to manage your infrastructure, whether it be traditional, serverless, or a mix, and are looking to better manage identity in your applications, Auth0 can help you to:

* Add authentication through traditional username/password databases.
* Add support for linking different user accounts with the same user.
* Support for generating signed JSON Web Tokens to call your APIs and flow the user identity securely.
* Analytics of how, when, and where users are logging in.
* Pull data from other sources and add it to the user profile, through [JavaScript rules](https://docs.auth0.com/rules).
* Achieve [SSO (Single Sign-On)](https://auth0.com/docs/sso) seamlessly.

<a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">Sign up</a> for a free account today and enjoy fast, seamless, and hassle-free authentication in your apps.

## Closing the Keynote

Throughout the keynote, Dr. Vogles focused on what the future of application development was going to be like. He spent a lot of time talking about the [Well Architected Framework](https://aws.amazon.com/architecture/well-architected/) principles and how these guidelines are used at AWS. I highly recommend you check it out, especially the section on [AWS Cloud Security](https://aws.amazon.com/security/). If you are interested in how our architecture works at [Auth0, be sure to check out our security](https://auth0.com/security) and [Auth0 availability and trust](https://auth0.com/availability-trust) documents for insights.

![AWS re:Invent Closing Statement](https://images.ctfassets.net/23aumh6u8s0i/6apxZintPPDau9KQK9zDBf/b3432512e59a85e53b91f051930252eb/closing)

Dr. Vogles closed out the keynote with a powerful statement on where he sees the future of application development. **All the code you ever write is business logic** is what he is predicting. I agree with his statement. At Auth0, we strongly believe in focusing on your core competency and outsourcing everything else, whether it be messaging, payment processing, or even identity. Check out our [guide on deciding whether or not you should build identity in-house or buy an existing solution](https://auth0.com/learn/build-or-buy-20-identity-management-questions/).

## Summary

Day four of AWS re:Invent 2017 was my personal favorite because of the Go support for AWS Lambda announcement. Overall, I feel that the conference was a big success with many announcements being exactly what developers wanted. Managed Kubernetes, a powerful cloud IDE, expanded Lambda, and better user security: what more could you ask for? The only thing I could ask for is more time to attend additional sessions, but many of these will be available online shortly, so I will be sure to tune in and catch what I missed. What did you think of AWS re:Invent this year? Does it make you more likely to use the platform?

Previous recaps:

* [Day One](https://auth0.com/blog/aws-reinvent-day-1-recap/)
* [Day Two](https://auth0.com/blog/aws-reinvent-day-2-recap/)
* [Day Three](https://auth0.com/blog/aws-reinvent-day-3-recap/)


AWS re:Invent Day 4 Recap

AWS re:Invent continues with day three and Andy Jassy, the CEO of AWS, delivered his annual keynote address. Here is our recap of the exciting announcements he shared.



Thank you for tuning back in to our TL;DR of the AWS re:Invent conference. Day three kicked off with a keynote by AWS CEO Andy Jassy where he announced a large number of new services that really go above and beyond, and cement AWS as the premier cloud platform for organizations large and small. I was also able to sneak into a couple of great talks and sessions after the keynote, but the highlight of the day was the keynote. Here's a TL;DR of all the announcements.

## Compute

### New EC2 Instances

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">New instances. M5 as predicted, H1 for <a href="https://twitter.com/hashtag/BigData?src=hash&amp;ref_src=twsrc%5Etfw">#BigData</a> and I3M bare metal hi io. <a href="https://twitter.com/hashtag/ReInvent?src=hash&amp;ref_src=twsrc%5Etfw">#ReInvent</a> <a href="https://twitter.com/hashtag/Live?src=hash&amp;ref_src=twsrc%5Etfw">#Live</a> <a href="https://twitter.com/hashtag/launch?src=hash&amp;ref_src=twsrc%5Etfw">#launch</a> <a href="https://t.co/2og9C1IfM9">pic.twitter.com/2og9C1IfM9</a></p>&mdash; Peter Joseph (@CloudyNetwork) <a href="https://twitter.com/CloudyNetwork/status/935908201035325440?ref_src=twsrc%5Etfw">November 29, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

AWS already has one of the broadest sets of compute offerings. Today, they announced three more elastic compute instances: **M5**, **H1**, and [**I3M**](https://aws.amazon.com/blogs/aws/new-amazon-ec2-bare-metal-instances-with-direct-access-to-hardware/), a bare metal offering for organizations wanting to have direct access to the hardware. In addition to the new instances, they also announced a new pricing model for their spot instances, which allows developers to use EC2 resources at reduced prices.

### ECS for Kubernetes

[Kubernetes](https://kubernetes.io/) is making some pretty large waves in the container orchestration space and until now it was very much a manual process to set up Kubernetes on AWS. That is about to change with [Amazon Elastic Container Service for Kubernetes](http://www.businesswire.com/news/home/20171129006075/en/AWS-Announces-New-Container-Capabilities%E2%80%94Amazon-Elastic-Container) or EKS which is launching in preview this week. Amazon EKS fully manages the availability and scalability of the Kubernetes control plane for each cluster and will allow organizations to easily run Kubernetes without having expert Kubernetes knowledge.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Managed Kubernetes for AWS - The Elastic Container Service for Kubernetes (EKS) <a href="https://twitter.com/hashtag/reinvent?src=hash&amp;ref_src=twsrc%5Etfw">#reinvent</a> <a href="https://t.co/lqKpwoYjOK">pic.twitter.com/lqKpwoYjOK</a></p>&mdash; AWS re:Invent (@AWSreInvent) <a href="https://twitter.com/AWSreInvent/status/935909627224506368?ref_src=twsrc%5Etfw">November 29, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>


### AWS Fargate

What if you didn't want to manage container clusters at all? AWS may just have a solution for that as well. [AWS Fargate](https://aws.amazon.com/blogs/aws/aws-fargate/) is a service that they announced today that can deploy and manage containers for you so you don't have to manage any of the underlying architecture.

![AWS Fargate](https://images.ctfassets.net/23aumh6u8s0i/2tGG8qFC9PW2VgIQprffeu/127696ae3fbf08139e93c34cf2a651c4/fargate)

## Databases

I have a love/hate relationship with databases. They power the applications that I build and I actually have fun working with traditional relational database systems, especially PostgreSQL, but I hate setting up database servers. Andy had a few announcements in the database space that really got me excited for the future of database management—or should I say lack of management?

### Amazon Aurora Serverless

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Aurora Serverless &lt; <a href="https://twitter.com/ajassy?ref_src=twsrc%5Etfw">@ajassy</a> and <a href="https://twitter.com/awscloud?ref_src=twsrc%5Etfw">@awscloud</a> team is stealing my dreams and making them real<br><br>AMAZING NEW SERVICE/FEATURE<a href="https://twitter.com/hashtag/reinvent?src=hash&amp;ref_src=twsrc%5Etfw">#reinvent</a> <a href="https://t.co/MJFOOUOS2y">pic.twitter.com/MJFOOUOS2y</a></p>&mdash; Mark Nunnikhoven (@marknca) <a href="https://twitter.com/marknca/status/935913290676428802?ref_src=twsrc%5Etfw">November 29, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

We already have serverless functionality for our applications, why not our databases? That is the question Amazon is asking as well. [Aurora Serverless](https://aws.amazon.com/blogs/aws/in-the-works-amazon-aurora-serverless/) aims to bring the benefits of serverless computing to database management where you only get charged for the resources that you consume. This is perhaps the biggest announcement of Andy's keynote for me personally, and in my opinion, a real game-changer in the database management space.

### Amazon DynamoDB Global Tables

[DynamoDB](https://aws.amazon.com/blogs/aws/new-for-amazon-dynamodb-global-tables-and-on-demand-backup/) is Amazon's key/value database offering and it is a pretty impressive one at that. During Prime Day, DynamoDB served over 12.9 million requests per second bringing a whole new meaning to the term big data and web scale. Over 3.34 trillion requests were served for Prime Day in total. DynamoDB Global Tables provides a fully managed multi-region NoSQL database that allows you to provide localized reads and writes to your data wherever your users may be.

### Amazon Neptune

Graph databases have been growing in popularity recently and Amazon will have an official player in the game with [Amazon Neptune](http://www.businesswire.com/news/home/20171129006077/en/AWS-Announces-New-Capabilities-Amazon-Aurora-Amazon). The promise of this graph database is that it will be fast, reliable, and of course fully managed by AWS. Another big benefit of Neptune is the ability to use multiple graph query languages such as TinkerPop and SPARQL.

## Machine Learning

If "Big Data" was the buzzword that dominated our industry the last five years, "Machine Learning" will be the buzzword that dominates the next five. The promise of machine learning is that it will allow organizations the ability to provide much more personal and relevant experiences to each and every user. We're seeing machine learning used in everything from image recognition, recommendation engines, to healthcare. AWS had lots of announcements in this space.

### Amazon Rekognition Video

The [Amazon Rekognition](https://aws.amazon.com/rekognition/) service provides developers with an API to make sense of images. For example, you feed it an image and it will tell you what it sees, for example, correctly identifying humans and other objects. [Amazon Rekognition Video](https://aws.amazon.com/blogs/aws/launch-welcoming-amazon-rekognition-video-service/) does the same exact thing, but for video content. It will be able to track people, detect various activities, recognize various objects, celebrities, and even inappropriate objects. This can be done with existing video and even live streams, which opens up a wide array of potential use cases.

### Amazon Transcribe

[Amazon Transcribe](https://aws.amazon.com/blogs/aws/amazon-transcribe-scalable-and-accurate-automatic-speech-recognition/) will equip developers with automatic speech recognition (ASR), allowing them to easily add speech-to-text capability to their applications.

### Amazon Translate

With more and more apps reaching a global audience, having correct localized translations for various languages is a challenge that [Amazon Translate](https://aws.amazon.com/blogs/aws/introducing-amazon-translate-real-time-text-language-translation/) is hoping to tackle with its neural machine translation service. The service promises to allow developers to localize websites and applications for international users with ease.

### Amazon Comprehend

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Announcing Amazon Comprehend. A full managed natural language processing service. Extract entities, key phrases &amp; sentiment <a href="https://twitter.com/hashtag/reInvent?src=hash&amp;ref_src=twsrc%5Etfw">#reInvent</a> <a href="https://t.co/gZE4i7TUNM">pic.twitter.com/gZE4i7TUNM</a></p>&mdash; AWS re:Invent (@AWSreInvent) <a href="https://twitter.com/AWSreInvent/status/935933201888944130?ref_src=twsrc%5Etfw">November 29, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

[Amazon Comprehend](https://aws.amazon.com/blogs/aws/amazon-comprehend-continuously-trained-natural-language-processing/) is an interesting service that uses natural language processing and machine learning to find insights and relationships in text. Developers can use this API to extract places, people, brands, and events to get a better understanding of what is presented in the text. Analyzing large quantities of documents, developers will be able to extract key topics and meaning from their datasets.

### Amazon SageMaker

If you aren't looking to translate, transcribe, or understand your content, perhaps you want to do something else with it. [Amazon SageMaker](https://aws.amazon.com/blogs/aws/sagemaker/) is a fully managed service enabling data scientists to build, train, and deploy machine learning models for any dataset. SageMaker will work with a variety of different platforms such as [TenserFlow](https://www.tensorflow.org/), [MXNet](https://mxnet.incubator.apache.org/), and others. Through its managed capability, it will help data scientists make sense of their data faster and with greater accuracy.

![Amazon SageMaker](https://images.ctfassets.net/23aumh6u8s0i/2OiSpncfThoA5vfBUWiDIJ/847e1cacaa18aa3d9db6e7c008d6664d/sagemaker)

### AWS DeepLens

[AWS DeepLens](https://aws.amazon.com/blogs/aws/deeplens/) is a wireless video camera and development kit that allows developers to get a better understanding of machine learning concepts. DeepLens will be released next year and will come with various samples to help developers learn more about what's possible with machine learning and how to get started.

## IoT

IoT is another buzzword that has been around for a little while but seems ready to take the world by storm. AWS had many announcements that will make working with IoT a much more pleasant experience than before.

### AWS IoT 1-Click

[AWS IoT 1-Click](http://www.businesswire.com/news/home/20171129006079/en/AWS-Announces-Slew-New-IoT-Services-Brings) is a service that makes it easy to trigger [AWS Lambda](https://aws.amazon.com/lambda/) functions from devices. If you've used [Amazon Dash](https://www.amazon.com/Dash-Buttons/b?ie=UTF8&node=10667898011) buttons in the past, the concept is fairly similar, only applied to any IoT device.

### AWS IoT Analytics

[AWS IoT Analytics](https://aws.amazon.com/blogs/aws/launch-presenting-aws-iot-analytics/) will give developers greater insight into the data their IoT devices collect. This fully managed service will collect, process, enrich, and analyze IoT device data at scale.

### Amazon FreeRTOS

[Amazon FreeRTOS](https://aws.amazon.com/blogs/aws/announcing-amazon-freertos/) is an IoT operating system for low-power edge devices that is easy to program, deploy, secure, connect to, and maintain. It is available free of charge, is fully open source, and best of all, available to all today.

## Security, Identity, and Compliance

I was very excited to learn about what identity and security announcements Amazon was going to announce today, and I have to say, I did not leave disappointed. Cognito is becoming a fully fledged identity platform, but that's not all Andy had up his sleeve.

### Advanced Security Features for Amazon Cognito

Amazon announced a number of advanced security features for [Amazon Cognito](https://aws.amazon.com/cognito/) including multifactor authentication, breached password detection, and various anomaly detection features. All of these features launched in beta today. If you need these features in a production-ready capacity right now, we at Auth0 also provide [multifactor authentication](https://auth0.com/multifactor-authentication), [breached password detection](https://auth0.com/breached-passwords), and [anomaly detection](https://auth0.com/docs/anomaly-detection).

### Amazon GuardDuty

Keeping your servers secure is important. [Amazon GuardDuty](https://aws.amazon.com/blogs/aws/amazon-guardduty-continuous-security-monitoring-threat-detection/) aims to make security a little easier by providing a managed threat detection service that allows your DevOps team to continuously monitor and protect your AWS accounts and workloads. The best part? It can be enabled with a few simple toggles in the AWS management console.

That sums up the major announcements from today's keynote. I'm sure we missed a couple as they were coming at us one after another. Werner Vogels, CTO of AWS, will deliver his two-hour keynote tomorrow and we will be sure to cover all of the announcements that he makes as well. As for the sessions I attended today, two really stood out:

## Session: AWS Security State of the Union

Steve Schmidt, chief information security officer of AWS, delivered the AWS Security State of the Union talk. The key takeaway from his talk was his mechanisms to drive security in an organization, and they are:

* **Buy-in from leadership** - security cannot be an afterthought.
* **Radically restricting and monitoring human access to data** - humans and data don't mix, follow the principle of least privilege.
* **Source code security**.
* **Patching** - everybody hates doing it, but it must be done.
* **Log retention duration** - storage is fairly cheap; once deleted, logs are lost forever.
* **Credential blast radius detection** - use IAM roles properly to ensure that if credentials are leaked, damage will be minimal.
* **Credentials lifespan reduction** - no long-lived tokens and continuous rotation of credentials.
* **TLS implementation** - encrypt data in motion and at rest.
* **AWS encryption everywhere**.
* **Canaries and invariants for security functionality**.

At Auth0, we follow many of these principles to the T to ensure that we are delivering the most secure platform for our customers and users.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">That’s a lot of 0’s... AWS <a href="https://twitter.com/hashtag/reInvent?src=hash&amp;ref_src=twsrc%5Etfw">#reInvent</a> Security State of The Union <a href="https://t.co/1PX9zuViS8">pic.twitter.com/1PX9zuViS8</a></p>&mdash; Teri Radichel (@TeriRadichel) <a href="https://twitter.com/TeriRadichel/status/935978817440530433?ref_src=twsrc%5Etfw">November 29, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>


## Session: Best Security Practices in the Intelligence Community

This breakout session included guest speakers from the US Intelligence Community, including Scott Kaplan, Deputy Chief of the NGA and John Nicely, Chief of Cloud Security for the US Government. They shared their lessons learned from moving their infrastructures from on-premise deployments to the cloud and how it allowed their organizations to respond quicker and with greater accuracy. This is definitely a talk I look forward to revisiting once it is posted online after AWS re:Invent 2017 concludes.

## Aside: Auth0 and AWS

If you are using AWS to manage your infrastructure, whether it be traditional, serverless, or a mix, and are looking to better manage identity in your applications, Auth0 can help you to:

* Add authentication through traditional username/password databases.
* Add support for linking different user accounts with the same user.
* Support for generating signed JSON Web Tokens to call your APIs and flow the user identity securely.
* Analytics of how, when, and where users are logging in.
* Pull data from other sources and add it to the user profile, through [JavaScript rules](https://docs.auth0.com/rules).
* Achieve [SSO (Single Sign-On)](https://auth0.com/docs/sso) seamlessly.

<a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">Sign up</a> for a free account today and enjoy fast, seamless, and hassle-free authentication in your apps.

## Summary

Day three of AWS re:Invent 2017 was very eventful. Andy's keynote has set the tone for the rest of the conference and that tone is "everything is everything." AWS wants to give you the best infrastructure to build and deploy your applications. Currently, the number of services offered by AWS is approaching 4,000! I can't wait to see what tomorrow has in store for us.

Previous recaps:

* [Day One](https://auth0.com/blog/aws-reinvent-day-1-recap/)
* [Day Two](https://auth0.com/blog/aws-reinvent-day-2-recap/)


AWS re:Invent Day 3 Recap

AWS re:Invent continues with day two. Here is our recap of the exciting announcements and interesting talks we were able to attend.



Day two of AWS re:Invent was in many ways similar to day one. There was no huge keynote, that is coming tomorrow, but there were a few announcements that I think the developer community will enjoy very much. Just because there was no keynote doesn't mean there weren't amazing talks, demos, and so much more to do. Here is my recap of day two!

## Announcement: AWS AppSync - Fully Managed Serverless GraphQL

![AWS AppSync](https://images.ctfassets.net/23aumh6u8s0i/2G5qDHi1caj6vkmfzx5euI/13d98a9aab619b997436f733d5afbaae/aws-appsync)

[GraphQL](http://graphql.org/) is challenging the way we write APIs. It allows clients to ask only for the data they need and in many ways can be seen as superior to the tried and true [REST pattern](https://en.wikipedia.org/wiki/Representational_state_transfer). Today, AWS announced a fully managed serverless GraphQL service called [AWS AppSync](https://aws.amazon.com/blogs/aws/introducing-amazon-appsync/) that promises to give developers the tools to build powerful data-driven apps with ease.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">We’re launching 🚀 AWS AppSync as a new service for preview later today! Here are some of its features! <a href="https://twitter.com/apatel72001?ref_src=twsrc%5Etfw">@apatel72001</a> <a href="https://twitter.com/hashtag/reInvent?src=hash&amp;ref_src=twsrc%5Etfw">#reInvent</a> <a href="https://t.co/fG9thG6sAa">pic.twitter.com/fG9thG6sAa</a></p>&mdash; AWS re:Invent (@AWSreInvent) <a href="https://twitter.com/AWSreInvent/status/935573868260896768?ref_src=twsrc%5Etfw">November 28, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

There's no better way to learn a new technology than to play with it, and if GraphQL has piqued your interest, you can give it a shot with a great [GraphQL tutorial](https://auth0.com/blog/build-a-rottentomatoes-clone-with-graphql-and-auth0/).

## Announcement: Amazon Sumerian

If you haven't heard of AR or VR, you haven't been paying attention. With [Amazon Sumerian](https://aws.amazon.com/sumerian/), Amazon wants to enable developers and content creators to create powerful AR and VR experiences without having to learn specialized programming.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">.<a href="https://twitter.com/Werner?ref_src=twsrc%5Etfw">@Werner</a> joined the experts from the Sumerian team on <a href="https://t.co/y6ZuEKkzw1">https://t.co/y6ZuEKkzw1</a> to see how to use this new service to easily create virtual reality, augmented reality &amp; 3D experiences. <a href="https://twitter.com/hashtag/reInvent?src=hash&amp;ref_src=twsrc%5Etfw">#reInvent</a> <a href="https://t.co/6ssimERc1K">pic.twitter.com/6ssimERc1K</a></p>&mdash; Amazon Web Services (@awscloud) <a href="https://twitter.com/awscloud/status/935641180842344448?ref_src=twsrc%5Etfw">November 28, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

Amazon Sumerian allows developers to create experiences for all the major AR and VR platforms include Vive, Oculus Rift, and iOS AR Kit, with Android AR support coming soon. I wonder when you'll be able to use your digital avatar's fingerprint for MFA.

## Announcement: AWS Elemental

Amazon announced a family of media service offerings that aim to make the experience of uploading, transcoding, and converting video simple and easy on AWS. The products announced include:

* [AWS Elemental MediaConvert](https://aws.amazon.com/about-aws/whats-new/2017/11/introducing-aws-elemental-mediaconvert/).
* [AWS Elemental MediaLive](https://aws.amazon.com/about-aws/whats-new/2017/11/introducing-aws-elemental-medialive).
* [AWS Elemental MediaPackage](https://aws.amazon.com/about-aws/whats-new/2017/11/introducing-aws-elemental-mediapackage).
* [AWS Elemental MediaStore](https://aws.amazon.com/about-aws/whats-new/2017/11/introducing-aws-elemental-mediastore/).
* [AWS Elemental MediaTailor](https://aws.amazon.com/about-aws/whats-new/2017/11/introducing-aws-elemental-mediatailor/).

Working with video on the Internet has always been a challenge and I am personally very excited about these new services.

## Session: Serverless Authentication and Authorization: Identity Management for Serverless Applications

![Signup and Login](https://images.ctfassets.net/23aumh6u8s0i/5BsLd0VkGWddum2oUMHqdL/bbbde903c61b55cc6c53a84e34f4d1fc/signup)

The first session I attended today was focused on serverless authentication and authorization, and I have to say it was one of my favorite sessions so far. Justin Pirtle and Vladimir Budilov led the session by explaining why [modern identity management](https://auth0.com/blog/the-role-of-identity-in-application-modernization/) is important and then solidified it with a really great demo. They focused on [AWS Cognito](https://aws.amazon.com/cognito/) and [Identity Federation](https://aws.amazon.com/iam/details/manage-federation/) to show how you can implement a modern identity infrastructure with little effort. What made the talk really effective was that they started small with the simplest authentication use case, and kept adding complexity over time, showing how you can achieve higher and higher levels of security.

![AWS Cognito Process](https://images.ctfassets.net/23aumh6u8s0i/4ZibXZILaBfhCtpgK0h6Fc/b57494628843c86f6e0656e640054f99/process)

Cognito, like Auth0, handles authentication by signing and sending [JSON Web Tokens](https://jwt.io/introduction/) when a user is successfully authenticated. The AWS Identity Federation solution can work with any provider, including Auth0, and it was really great to see support for MFA, Hooks managed through serverless Lambda functions, and much more. If you are interested in [using Auth0 with AWS, check out integration docs](https://auth0.com/docs/integrations/aws).

## Session: Build a Serverless, Face-Recognizing IoT Security System with Amazon Rekognition and MongoDB Stitch

This session was led by [MongoDB](https://www.mongodb.com/) CTO and Co-Founder Eliot Horowitz, and focused on two big topics: **building serverless applications** and **security**. Eliot introduced a new framework for building applications called [Stitch](https://www.mongodb.com/cloud/stitch), which is essentially a REST API for your MongoDB database. Stitch can be used to augment your existing applications or power your entire backend.

![Stitch](https://images.ctfassets.net/23aumh6u8s0i/2npH5XlWIjQtPqUTEA5u9p/7f9b7949707032fa00b66b671bc06a5f/stitch)

Eliot showcased and live-coded four demos. The first demonstrated how to implement Stitch in an existing application by adding commenting functionality to a blog. The second and third demos focused on running your entire application backend from Stitch with various rules, permissions, and third-party service integrations. The fourth demo was the exciting one!

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Excitement around <a href="https://twitter.com/eliothorowitz?ref_src=twsrc%5Etfw">@eliothorowitz</a> talk is building! <a href="https://twitter.com/hashtag/MongoDB?src=hash&amp;ref_src=twsrc%5Etfw">#MongoDB</a> <a href="https://twitter.com/hashtag/reinvent2017?src=hash&amp;ref_src=twsrc%5Etfw">#reinvent2017</a> <a href="https://t.co/BJkp205RzS">pic.twitter.com/BJkp205RzS</a></p>&mdash; Meagen Eisenberg (@meisenberg) <a href="https://twitter.com/meisenberg/status/935565910428884994?ref_src=twsrc%5Etfw">November 28, 2017</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

For the fourth demo, Eliot had a door with a smart lock installed and showed how you can use Stitch, [Twilio](https://www.twilio.com/), and [AWS Rekognition](https://aws.amazon.com/rekognition/) to unlock your door with just your face. The live demo unfortunately failed, but the use case it presents is very interesting nonetheless. Stitch seems like a very interesting framework for building serverless applications and we will be sure to write a blog post on how to use it in the near future.

## Session: Translating the Promise of IoT into Business Value and Customer Success

The first IoT session I attended was hosted by [SalesForce](https://www.salesforce.com/) and run by SalesForce VP of IoT Lindsey Irvine, and Mark Relph, AWS Head of Business Development for IoT and Emerging Technology. In this talk, Lindsey framed IoT and AI as the fourth industrial revolution and shared some very powerful stories that backed that assertion.

![IoT Revolution](https://images.ctfassets.net/23aumh6u8s0i/37gmQUJuao1tSrN5aIq6Yo/cfb566db13c080a02872b9c288c9ae18/revolution)

IoT is comprised of three concepts: smart "things", the cloud, and analytics and intelligence. A smart device by itself is not very useful. It is when it's connected to the cloud where actionable events can occur that a "thing" gains usefulness. Finally, having analytics and data on what that "thing" is doing and constantly improving it is what will drive the next wave of IoT smart devices.

The demo that was presented cemented these three concepts. They showed a small solar panel device that was connected to AWS IoT that would send status updates on its health. If the solar panel was unable to process light or had a malfunction, it would alert a service technician that something was wrong and in many cases was able to tell the technician exactly what the problem was. Gathering analytics on all the solar panel "things", a company could keep better track of their panels and even anticipate when they would need maintenance before sending out a technician to the field for manual evaluations.

## Session: The future of location services is here. Revolutionizing the user experience with machine learning and AI.

The second IoT session I attended focused on improving the user experience with machine learning and AI. Eric Motazedi and Matthew Lancaster of [Accenture](https://www.accenture.com/us-en/new-applied-now) introduced Rhythm.io, a platform for building revolutionary user experiences leveraging the power of location, machine learning, and serverless technologies.

![Rhythm](https://images.ctfassets.net/23aumh6u8s0i/7i4A2Mdjc90NTnb9MpIr7u/8e8ee5fa4338e04e04b0a1c6a9246562/rhythm)

Rhythm allows developers to build experiences that focus on giving humans the tools to build more personalized interactions. The demo they gave was focused on a hotel guest checking into a hotel. Rather than going to a registration desk, the guest would simply get out of their car, walk towards the entrance of the hotel, and be automatically checked in. Their room could also be personalized by setting the temperature for example to their preferred temperature. Going a step further, when the Rhythm framework detects that a guest is checking in, it could alert the bellman of who the guest is so that they can greet them by name. 

It may seem like science fiction, but the Rhythm team is focused on delivering this platform through a series of affordable IoT devices, machine learning, and AI.

## Aside: Auth0 and AWS

If you are using AWS to manage your infrastructure, whether it be traditional, serverless, or a mix, and are looking to better manage identity in your applications, Auth0 can help you to:

* Add authentication through traditional username/password databases.
* Add support for linking different user accounts with the same user.
* Support for generating signed JSON Web Tokens to call your APIs and flow the user identity securely.
* Analytics of how, when, and where users are logging in.
* Pull data from other sources and add it to the user profile, through [JavaScript rules](https://docs.auth0.com/rules).
* Achieve [SSO (Single Sign-On)](https://auth0.com/docs/sso) seamlessly.

<a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">Sign up</a> for a free account today and enjoy fast, seamless, and hassle-free authentication in your apps.

## Summary

That wraps up day two of the re:Invent. Tomorrow, Andy Jassy, the CEO of Amazon Web Services, will deliver the first of two AWS keynotes, and I can't wait to see all the big announcements!

[Click here for a recap of day one of AWS re:Invent](https://auth0.com/blog/aws-reinvent-day-1-recap/).


AWS re:Invent Day 2 Recap

The annual Amazon Web Services (AWS) re:Invent conference kicks off this week. Here's a TL;DR of all the big announcements as well as our observations and things we learned.



The AWS re:Invent conference is back in Las Vegas this week and with it comes **five** days of awesome talks, deep-dives, and of course, huge announcements that promise to boost developer productivity, make DevOps simpler, and help companies grow and scale. This year the conference is spread across five hotels on the Las Vegas Strip and features over 1,500 different talks. I would love to be able to attend each one, but since I can't be in 100 places at once, I will share what I learned at the talks I could attend as well as the general announcements that Amazon will have when they host their keynotes on Wednesday and Thursday this week.

![AWS Registration](https://images.ctfassets.net/23aumh6u8s0i/5NswEp40XSF5NMaDbrEIna/c7bf213ba0f229c022ccf629149dd3dc/registration)

At Auth0, we deeply care about **security, compliance, and identity**, and as luck would have it, re:Invent features 117 sessions on just that. The other topic that I focused on today was **serverless** computing and I learned a ton. Since there was no keynote today, below are things I learned at the breakout sessions.

## Session: IAM for Enterprises: How Vanguard Strikes the Balance Between Agility, Governance, and Security

This session was hosted by AWS Security Consultant Reef Dsouza and Senior Security Architect for [Vanguard](https://investor.vanguard.com/corporate-portal/), Rajeev Sharma. Reef set the stage by sharing some best practices when it comes to Identity and Access Management (IAM) and how AWS can help. Some general tips shared include:

* **Defense in Depth** - multiple layers of security.
* **Separation of Duties** - well-defined roles and permissions.
* **Principle of Least Privilege** - users should only have access to what they absolutely need.

Rajeev went on to explain how Vanguard, one of the largest investment companies in the world, applied these guidelines when moving their architecture to the AWS cloud and the numerous benefits that it brought them. 

Many of the best practices that Reef shared, we at [Auth0](https://auth0.com) have been very vocal about as well. [Read our five tips on how you can make your app more secure in less than 20 minutes](https://auth0.com/blog/5-ways-to-make-your-app-more-secure-in-less-than-20-minutes/).  

## Session: Serverless for Security Officers: Paradigm Walkthrough and Comprehensive Security Best Practices

This session, hosted by Jonathan Desrocher, Eugene Yu, and Henrik Johansson, focused on best security practices as they pertain to serverless applications. Serverless applications are gaining more and more momentum, and whether you go with [AWS Lambda](https://aws.amazon.com/lambda/), [Auth0 Webtask](https://webtask.io), or another serverless platform, you are sure to have questions on the various security considerations that arise when using these platforms.

![Serverless Security Paradigm](https://images.ctfassets.net/23aumh6u8s0i/27UjOgJJ8Gih7xp17BIOfq/559e2161bf0b8c9dae07d92e3a127477/security)

The good news is that essentially all the best security practices that pertain to traditional applications also apply to serverless applications as well. The bad news is that each function is a potential attack vector, so they require a bit more effort and attention to properly secure. Additionally, with serverless, the platform provider takes on a much larger role when it comes to securing the application, but at the end of the day, security is everyone's responsibility.

## Session: Credentials, Credentials, Credentials, Oh My!

Quint Van Deman of AWS hosted this **chalk talk**, which consisted of a 10-15 minute presentation on best practices when it comes to managing the various credentials in the AWS ecosystem, and then a 45 minute Q&A session where he asked the audience for use cases and worked out best practices for those use cases. We covered many complex use cases involving the various AWS credential services including Cognito, Secure Token Service (STS), and various forms of credential exchanges whether internal at AWS or exchanging credentials from a third party service like Auth0.

![AWS Credentials](https://images.ctfassets.net/23aumh6u8s0i/CAUKsPAy7O2OV0cO9Jfe3/2203138d67defc488c9607cacbc09869/credentials)

One of the key takeaways from this session was that having a centralized source of truth and federating that identity throughout your infrastructure was superior to having multiple identity stores for the different applications in your infrastructure. [Learn more about Single Sign On](https://auth0.com/blog/what-is-and-how-does-single-sign-on-work/) and [how you can call AWS APIs with Auth0 tokens](https://auth0.com/docs/integrations/aws).

## Session: Evolution of Serverless Architectures Through the Lens of Community

Serverless is taking the development world by storm. This was a very enlightening talk by Peter Sbarski and Sam Kroonenburg of [A Cloud Guru](https://acloud.guru/), one of the early adopters of serverless technology. Sam, the founder of A Cloud Guru, even showed that their production account had no active Amazon EC2 instances. This session focused on the growth of serverless architectures over the last three years and highlighted some of the providers as well as consumers of serverless technologies. Sam also covered the growing community around serverless which included quotes from many prominent members of the community, serverless meetups around the world, and even a conference!

![Auth0 at AWS](https://images.ctfassets.net/23aumh6u8s0i/4qb5L0Fhet60RmV251mY6q/5faffafb398bea2c0e0208a102f311e4/auth0)

Auth0's [Webtask](https://webtask.io) also got a shout-out, as did [Auth0's identity solution](https://auth0.com). Sam closed out his talk by sharing some emerging patterns in the serverless community, especially [application modernization and microservices, which you can learn much more about here](https://auth0.com/blog/getting-a-competitive-edge-with-a-microservices-based-architecture/).

Finally, Hernan Garcia of [CityWallet](https://www.citywallet.net/) gave a real-world example of how he and his team achieved success with a serverless architecture when their more traditional methods failed and put their startup at risk.

## Session: Compliance and Top Security Threats in the Cloud—Are You Protected?

We closed out the day with a very informational session on top security threats that organizations face by Teri Radichel of [WatchGuard Technologies](https://www.watchguard.com/) and Boyan Dimitrov of [Sixt](https://www.sixt.com/). The top threats included were:

* **Unprotected keys and credentials.**
* **Broad permissions for engineers.**
* **Unpatched software.**
* **Malicious software updates.**
* **Open network ports.**
* **Flat network design.**
* **Broad permissions for applications.**
* **Bad configuration management.**
* and **Data Exfiltration.**

Teri discussed how these threats led to large data breaches such as the [Equifax Data Breach](https://auth0.com/blog/equifax-data-breach/) that leaked the Social Security Numbers of almost all Americans and the [WannaCry Ransomware](https://auth0.com/blog/a-massive-ransomware-attack-targets-organizations-around-the-globe/) which locked out banks, airlines, and even hospitals. 

Boyan discussed strategies on how to mitigate risk and the key takeaway was that compliance does not equal security. Many of the companies that experienced data breaches were compliant with many standards and organizations but were still breached. Security is something that must be constantly monitored to be effective.

## Aside: Auth0 and AWS

If you are using AWS to manage your infrastructure, whether it be traditional, serverless, or a mix, and are looking to better manage identity in your applications, Auth0 can help you to:

* Add authentication through traditional username/password databases.
* Add support for linking different user accounts with the same user.
* Support for generating signed JSON Web Tokens to call your APIs and flow the user identity securely.
* Analytics of how, when, and where users are logging in.
* Pull data from other sources and add it to the user profile, through [JavaScript rules](https://docs.auth0.com/rules).
* Achieve [SSO (Single Sign-On)](https://auth0.com/docs/sso) seamlessly.

<a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">Sign up</a> for a free account today and enjoy fast, seamless, and hassle-free authentication in your apps.

## Summary

Day 1 of the re:Invent was very eventful. I wish I could have attended more talks, but the talks I could make it to were very insightful and left me wanting more. Tune in the rest of the week as I cover more in-depth sessions as well as the keynotes. I hope you find this TL;DR useful.


AWS re:Invent Day 1 Recap

Network, catch up on all the big announcements, and grab some swag at Rogue Ales Pub House. The happy hour hosted by Auth0, Algolia, and Keen IO is happening right after the talks end on May 24, 2017.



[Signal.2017](https://www.twilio.com/signal) is less than two weeks away and we can't wait to see what Twilio and the numerous vendors attending will have to show. The two-day conference kicks off May 24 and will be held at Pier 27 in San Francisco, California. After a long day of invigorating sessions including: [IFTTT: Building applications for the future](https://www.twilio.com/signal/schedule/7sIpsjOkTewgygqY86Sc0Y/ifttt-building-applications-for-the-future) by [Linden Tibbets](https://twitter.com/@ltibbets), [Congress on Speed Dial: Advocacy in the age of Twilio](https://www.twilio.com/signal/schedule/6LbXCBBhtYuKCSciyS8WA/congress-on-speed-dial) by [Ian Webster](https://twitter.com/@iwebst), and [What Can You Do With Twilio Voice?](https://www.twilio.com/signal/schedule/4r1gBAICZOAQGEAAascQSi/what-can-you-do-with-twilio-part-2) by [Manav Khurana](https://twitter.com/@manavkhurana), join Auth0, Algolia, and Keen IO as we host a special happy hour for Signal.2017 attendees.

![Signal Website](https://images.ctfassets.net/23aumh6u8s0i/10qrmp8n7s4gPXO0v98RNW/a1096d585fc0d8911d53703d80b15406/signal)

The happy hour will be a great opportunity to meet and network with fellow attendees, talk about all the new announcements, and get some swag. Food and drinks will be provided courtesy of Auth0, Algolia, and Keen IO.

**What**: Auth0, Algolia, and Keen IO Happy Hour

**Where**: Rogue Ales Public House, 673 Union Street, San Francisco, CA 94133

**When**: May 24, 2017 at 7:30pm - 9:30pm

**How**: [RSVP](https://www.eventbrite.com/e/rogue-ales-happy-hour-by-algolia-auth0-and-keen-io-tickets-34586663642) to reserve your spot as space is limited

We can't wait to see you there!

<include src="asides/AboutAuth0" />

### About Algolia

Algolia helps developers connect their users with what matters most. Our hosted search API powers billions of queries for thousands of websites & mobile applications every month, delivering relevant results in an as-you-type search experience in under 100ms anywhere in the world. Algolia's full-stack solution takes the pain out of building search; we maintain the infrastructure & the engine, and we provide extensive documentations to our dozens of up-to-date API clients and SDKs with all the latest search features, so you can focus on delighting your users.

For more information visit [https://www.algolia.com](https://www.algolia.com) or follow [@algolia](https://twitter.com/algolia) on Twitter.

### About Keen IO

Over 60,000 developers use Keen IO APIs to capture, analyze, and embed event data into their tools and products. Thousands of customers rely on Keen’s event data platform to white label data applications in media, e-commerce, adTech, gaming, IoT and retail. Keen’s customers query trillions of data points daily. Keen IO also values and promotes empathy, introspection, distributed innovation, continuous learning, playing to your strengths, and patching your weaknesses with diverse collaborators.

For more information visit [https://keen.io](https://keen.io) or follow [@keen_io](https://twitter.com/keen_io) on Twitter.


Join Auth0, Algolia, and Keen IO for Happy Hour at Signal 2017

Jose-Romaniello

I started working at Auth0 before the first line of code for our authentication platform existed. I’ve been able to go through the journey of seeing our ideas go from prototype to living production code that impacts millions of people. It’s satisfying to know that my actions here are having a positive impact in solving problems for developers like me.

Head of Engineering

Jose Romaniello

The Auth0 Australia Region joins the US and EU regions, extending our ability to offer the lowest login latency and allow subscribers to meet any applicable compliance requirements.



---

**TL;DR**: The Auth0 Australia Region launches to join the US and EU regions in helping subscribers lower login latency and meet compliance regulations for data residence.

---

We’re happy to announce that the Auth0 Australia Region has launched! Auth0 is on a mission to make identity simple for developers and IT professionals everywhere - something we’re already doing for more than 30,000 subscribers across more than 150 countries worldwide. Now those in and closest to Australia will enjoy even lower latency logins.

![auth0 australia](https://images.ctfassets.net/23aumh6u8s0i/70hRYE1NWs2kEwEYHNy1H2/45e813ff330cf6e85d8db38d985ad9cc/australia-map)

## One Auth0, three continents

The Auth0 Australia Region joins the [US and EU regions](https://auth0.com/blog/2015/04/27/auth0-europe-launches/) previously available, extending our ability to offer the lowest login latency and allow subscribers to meet and exceed any applicable compliance requirements. Respective to all of the regions in which we operate, Auth0 is committed to following all legislation governing data regulation, privacy and consumer law.

Auth0 subscribers can specify their preferred location by simply choosing from a dropdown when they create a free developer account. Existing subscribers who are running from the US or EU regions and want to switch should just [let us know](https://support.auth0.com) and we’ll help with the migration. Several Auth0 subscribers have already made a quick and successful transition.

![auth0 australia](https://images.ctfassets.net/23aumh6u8s0i/1TD9R5r9f1Xs3jm0HD4jfY/4efd61311d5e176452cda6ffa79a90ca/australia-region)

## Even faster

When you choose a service region closer to where your customers operate, you can experience some great login latency improvements. Subscribers who migrated from the US to the EU Region saw [latency improvements of nearly 2x](https://auth0.com/blog/2015/04/27/auth0-europe-launches/); the same is true for those now migrating to Auth0 Australia.

<include src="TweetQuote" quoteText="Choosing a service region closer to where your customers operate can improve login latency."/>

## We’re here to help

As always, we’d be happy to answer any questions or provide any assistance related to the new Australia region, or anything else. [Open a support ticket](https://support.auth0.com), chat with us at [https://chat.auth0.com](https://chat.auth0.com) or ask anything at ask.auth0.com.

We look forward to hearing from you!


G’day, Mate! Auth0 Australia Launches

Jon Gelsey

Today I am very proud to announce that we’ve raised $2.4 Million in seed funding led by Bessemer Venture Partners, with participation from K9 Ventures

Today I am very proud to announce that we’ve raised $2.4 Million in seed funding led by [Bessemer Venture Partners](http://bvp.com), with participation from [K9 Ventures](http://www.k9ventures.com/), [Portland Seed Fund](http://www.portlandseedfund.com/), [NXTP Labs](http://www.nxtplabs.com/) and individual investors.


<a target="_new" href="http://www.bvp.com/team/david-cowan"><div style="float: right;margin: 40px 0px 10px 10px;"><img style="display: block;border-radius: 100px;max-width: 80px;height: 80px;position: relative;margin: auto;" src="https://images.ctfassets.net/23aumh6u8s0i/5TiHhMqvGHewTIPGSV3VvC/06c130cd5ad5653b933b5ac5460cc5aa/VCjw8OdnuJ"/></div></a>

> _In the same way Twilio democratized access to SMS and voice communications, Auth0 developed an identity service to eliminate the growing complexity of authentication and authorization for developers. Auth0 has the dream team in authentication security, which is why developers are so quickly adopting their API as the de facto way to do logins._ **David Cowan**, Partner at Bessemer Venture Partners.


I am also very proud to share that [Auth0](https://auth0.com) has crossed the 8,000 subscriber mark and is now used in 124 countries.



We were founded by developers for developers, with the goal of eliminating the pain of integrating authentication and authorization into apps and APIs.  So we’re very happy that so many developers from enterprises both large and small are finding our service useful.  We now deliver identity-as-a-service to not only the newest startups but also to the very largest enterprises, like [Schneider Electric](http://www.schneider-electric.com/), the global specialist in energy management, [Allegion](http://www.allegion.com/), the leading provider of security solutions for homes and businesses around the world, and [Berkshire Hathaway Travel Protection](https://www.bhtp.com/), the Berkshire Hathaway travel insurance arm.

We’ve been told by our subscribers that we’re the most innovative identity company in the market today, so we are further pleased to announce that the world’s leader in innovation management and collaborative project management platform software, [Mindjet](http://mindjet.com), is now using Auth0 as their core identity component for their software.

<a target="_new"><div style="float: right;margin: 40px 0px 10px 10px;"><img style="display: block;border-radius: 100px;max-width: 80px;height: 80px;position: relative;margin: auto;" src="https://images.ctfassets.net/23aumh6u8s0i/54N2lddRRrwW1opMninOWw/46c627a0d65bc403d9d762a2fd98406c/jPZqcYTW6x"/></div></a>

> _“We took a strategic, calculated bet on Auth0. By using Auth0's sophisticated identity infrastructure -- rather than building it ourselves -- we were able to assign two, full-time software engineers to developments directly related to Mindjet's core value proposition, which resulted in higher revenue while saving us a great deal of money.”_ **James Gardner**, SVP of Product at Mindjet

We are using our seed funds to further expand our [development team](http://auth0.com/jobs) and to expand our [sales](http://auth0.com/jobs) and [marketing](http://auth0.com/jobs) efforts.

We founded Auth0 to eliminate the pain of authentication and authorization for developers. We’re happy that we’ve been found useful by so many developers already, but there’s still a lot of work to be done.

To keep yourselves up to date on our progress, please follow us on twitter: [@auth0](http://twitter.com/auth0)

Big Milestone: $2.4M early funding and 8000 Subscribers

We are moving from the deprectad Google Apps Provisioning API to the new Google Apps Directory API. This will affect you only if you are using Google Apps

We are moving from the deprectad [Google Apps Provisioning API](https://developers.google.com/google-apps/provisioning/) to the new [Google Apps Directory API](https://developers.google.com/admin-sdk/directory/).

__This will affect you only if you are using Google Apps and the `/users` endpoints of Auth0.



Google Apps Provisioning API has been deprectated few months ago, on the other hand the new API has some advantages like providing a public link for the profile photo and having more granular scopes.

__Previously permisive scope:__

![Previously permisive scope](https://images.ctfassets.net/23aumh6u8s0i/3wuKxrpfLUFTc3LD0aQkIF/3d525ed21b52a54e3a13952b26e3d024/ss-2013-09-27T15-17-16_safe_save_152024)

__New granular scope:__

![New granular scope](https://images.ctfassets.net/23aumh6u8s0i/7z5aAUF5nxsGvc5nj89Jfk/0574a0241ddeb95497c0da8907e9e5d4/ss-2013-09-27T15-25-52_safe_save_152637)

In order to have access to this API enable the "Admin SDK" service in the [Google API Console](https://code.google.com/apis/console) as follows:

![ss-2013-09-27T15-33-02.png](https://images.ctfassets.net/23aumh6u8s0i/7LlyKqhK8xS3sQ52fGWrEt/e4bcb84972a7c064dd18ea2f40ed4465/ss-2013-09-27T15-33-02)

New __Google Apps Connections__ will automatically use this new API and pre-existing connections will need to be re-provisioned by following the provisioning link. If you are the domain administrator follow this link, if not copy and send the link to the domain admin:

![](https://dl.dropbox.com/s/6hojv2cdhl1sw6i/ss-2013-09-27T15-28-44.png)

Until you have done this step, the `/users` endpoint will return only the users that have signed in to your app at least once.

Moving to Google Apps Directory API

eugenio-pace-new-avatar

Pace co-founded Auth0 in early 2013 with CTO and “brother-in-arms” Matias Woloski while living 7,000 miles apart from each other. Since then, Pace has played an instrumental role in growing Auth0 into a leading identity management company that is loved by developers and trusted by global enterprises. He loves traveling and has visited more than 35 countries for business and pleasure. He currently lives in Redmond, Washington with his wife, two sons, and their labrador retriever. In his spare time, he enjoys the outdoors, rowing, riding bikes, spending time with his family, restoring his 1970 Karmann Ghia, writing his blog, and reading history and philosophy.

CEO and Co-Founder

Eugenio Pace

A few days ago we released integration between Auth0 and New Relic. You can now login to New Relic with your Github, Google, Amazon, Twitter, Active Directory

A few days ago we released integration between [Auth0](http://developers.auth0.com/newrelic) and [New Relic](http://newrelic.com/auth0). You can now login to New Relic with your Github, Google, Amazon, Twitter, Active Directory or LDAP accounts. [See here for a complete list of supported identity providers in Auth0](http://docs.auth0.com/identityproviders): Consumer and Enterprise.

As with other integrations we have published, setup takes just a few minutes and it is straight-forward:

### Add New Relic from the dashboard:

![](https://images.ctfassets.net/23aumh6u8s0i/29zM6x62oj9AjgSzxKSdrr/03590a98d87624844943f67fb8ff52b0/newrelic-create)



### Enter your New Relic Account and follow a few simple steps:

![](https://images.ctfassets.net/23aumh6u8s0i/6lsrh4GtJ6KwldsocrXQEb/00af68613b1a83c262eda897b1bc7c51/newrelic-tutorial)

Here's a quick end to end demo that shows login into New Relic with a Github account (use full screen):

<iframe width="710" height="399" src="//www.youtube.com/embed/pmMkm0Zh2o0?rel=0&vq=hd1080" frameborder="0" allowfullscreen></iframe>

And the best news: __New Relic integration is free for all our editions.__

[Try Auth0 yourself!](https://auth0.com)

SSO with New Relic

You probably noticed that we are adding apps at a very fast pace. This past week we added SpringCM and EchoSign.

You probably noticed that we are adding apps at a very fast pace. This past week we added [SpringCM](http://www.springcm.com) and [EchoSign](http://www.echosign.com). And we have a few more in the pipeline, as customers request them. There's no magic here, and we are a small team. So, how we do it? The secret is that it really takes very little effort. Auth0 ships with a generic __SAML App__ that is completely configurable:

![](https://images.ctfassets.net/23aumh6u8s0i/5gryzbD9bCDQz8nMENZoz4/07006ec99cc55807d25b3928e9f9b22c/saml2-config)

Supported apps like Box, Dropbox, Zendesk, Salesforce, SpringCM, EchoSign, etc. are just _templates_ to simplify and streamline configuration. But they are not strictly needed.

###Any app that supports __SAML__ is automagically supported by Auth0.

The integrations that have taken longer to publish, are with those companies that have chosen not to offer a self-service experience, and require us to call their support and enable/setup the feature for us. Human intervention adds a lot of latency in the process.

> Special kudos to [SpringCM](http://www.springcm.com) and [EchoSign](http://www.echosign.com) for a fantastic onboarding experience and great support.



##Setup

Configuring a SAML aware app is usually a matter of tweaking a few parameters. We've chosen to surface these as a Json object that you can edit online:

![](https://images.ctfassets.net/23aumh6u8s0i/2RR5VG7cYH4AR0JFBuSAPL/c66d0885a484e42bc7491fe0f1782aca/saml2-config-param)

We've even included an online __SAML debugger__ that shows exactly the `SAMLResponse` (encoded and decoded) that we generate. One step forward in simplifying troubleshooting of integrations. When you click on __Debug__, we will initiate the authentication process to whatever identity providers you have configured. After successful authentication we will return and display the result:

![](https://images.ctfassets.net/23aumh6u8s0i/3a2JzhvpM5xyp9WlyNzUAK/1e05595a27b1d83921100077844ee4fb/saml-debugger)

You can easily look for attributes, mappings, signatures and other SAML artifacts to quickly identify mis-configurations.

So, if you don't see the app you need on our list, fear not! Use this feature or let us know:
[open a support ticket](https://support.auth0.com)

[Try Auth0 yourself!](https://auth0.com)

[Want to learn more about Single Sign-On? Get The Definitive Guide on SSO (74-page free eBook) here.](https://resources.auth0.com/definitive-guide-to-single-sign-on/?utm_source=blog)

SSO with any SAML App

Another great app is added to the Auth0's portfolio. You can now setup SSO with Box. As usual, it will take just a few, very simple steps.

Another great app is added to the Auth0's portfolio. You can now setup SSO with [Box](http://www.box.com). As usual, it will take just a few, very simple steps.

Any of our [supported Identity Providers](https://docs.auth0.com/identityproviders) would work of course, including Active Directory, LDAP, SQL, Google Apps, Office365, or any social ones.

##How does it work?

As many others, Box implements the SAML Protocol for authentication and identity federation. Auth0 bridges SAML-P with whatever your preferred Identity Provider implements: SAML, OAuth 1, OAuth 2, LDAP, a SQL database, __anything__.



##Setup

Configuring Box in Auth0 takes just a single checkbox. That's all!

![](https://images.ctfassets.net/23aumh6u8s0i/5gNEbLVzuq5qPXuKB7MDnW/7a26b4b83c9d1de65c856122c329ed95/3sjU4)

You will need to contact Box support team to enable SAML on your account. To make things simpler for you, you will find all the information they will request from you on the Auth0 Dashboard:

1. The signing certificate.
2. The EntityID.
3. The claim that identifies your users.
4. The redirectURL.

Once configuration is completed on their side, you are done!

We want to thank Arif Shenoy, Nick Lee & Weisen Li from Box, for their help, and great support.

[Try Auth0 yourself!](https://auth0.com)

SSO with Box

Мы очень рады сообщить, что мы недавно добавили в Auth0 поддержку аутентификации в вКонтакте! Теперь пользователь может использовать свой вКонтакте логин для

Мы очень рады сообщить, что мы недавно добавили в Auth0 поддержку аутентификации в вКонтакте! Теперь пользователь может использовать свой вКонтакте логин для входа в любое из поддерживаемых Auth0 приложений, включая SharePoint, Salesforce, RMS, Azure Mobile Services, Dropbox, Zendesk или специально-разработанных приложений в .NET, Java, Node, Ruby и т.д.



Достаточно просто подключить Auth0 к вКонтакте. Вы найдёте все настройки под __Social Connections__:

![](https://images.ctfassets.net/23aumh6u8s0i/1uYdM5FoY72bKzjoRbaNHv/740c811d61244d3920a4d528c36599ec/vk-social)

Единственное, что необходимо, так это __Application Id__ и a __Secret Key__, которые нужно получить от вКонтакте.

Также в Auth0 поддерживаются уровни разрешений и доступа вКонтакте (к примеру, видео, фото, стена), так что Вы можете запросить соответствующий уровень доступа для Вашего приложения:

![](https://images.ctfassets.net/23aumh6u8s0i/5fRSMG54pgFJUGAfJpDRNH/27d5cd0e9b7ece2b178ffa60d7837ab0/vk-scopes)

[Попробуйте Auth0 сейчас!](https://auth0.com)

Мы добавили поддержку пользователей вКонтакте!

Since we released the beta, one of the things our customers have been telling us, is they want us to support a "username/password" authentication.

Since we released the beta, one of the things our customers have been telling us, is they want us to support a "username/password" authentication. Auth0 is being used today by two different audiences:



-   **Cloud apps**: they want to have a single uniform authentication and login analytics, across all the options: social providers, enterprise providers (like Google Apps or Active Directory, SAML Providers) and now, username and password.

-   **Organizations**: our enterprise customers, typically have already a dozen (sometimes more) of "identity silos" created for different apps, at different times and they want to consolidate those databases.

### Enter Database Connections

Database Connections works exactly like "Custom Connections" but with some advantages:

-   you don't have to deploy another application
-   seamless widget integration
-   a whole set of templates for your needs
-   develop, try and debug in the cloud without needing to install any tool

### Example: ASP.NET Membership Provider

Suppose we have already started to build a product using the standard [ASP.NET Membership Provider](http://msdn.microsoft.com/en-us/library/yh26yfzy.aspx). ASP.NET Membership autogenerates a set of tables and relationships in Sql Server as shown here:

![](https://images.ctfassets.net/23aumh6u8s0i/26Ne1r7Cu5BAvPccDJj1bk/b47446405fa3aaee31d4619795505498/A4N95VJO07-1200x1200)

We would start by creating a new Database Connection in Auth0. Then we can pick the ASP.NET Membership Provider from the list:

![](https://images.ctfassets.net/23aumh6u8s0i/2hm42zu7yMmexxcKGS8rZ/26347d0caae8aa0ad5fab65062be9f3c/Screen_20Shot_202013-06-03_20at_205)

We can tweak the script to fit our needs:

![](https://images.ctfassets.net/23aumh6u8s0i/5ibHFyRdxAUdaYwYf9xxAj/3d39d1282c5da51ce32103af09a305e3/Screen_20Shot_202013-06-03_20at_205)

Connection strings and passwords should be stored as configuration settings in the bottom pane:

![](https://images.ctfassets.net/23aumh6u8s0i/4cDApZFbPaVcXDVVhruc1A/14b50a7d00f80da3fad919ecd2477402/Screen_20Shot_202013-06-03_20at_205)

We can open at anytime the Try window to run our script:

![](https://images.ctfassets.net/23aumh6u8s0i/7uMWjjxRI0MUsmOaVw5nfr/272daf2d388ff2cf1abe3af577d22413/Screen_20Shot_202013-06-03_20at_205)

In order to debug the script you can take advantage of `console.log`:

![](https://images.ctfassets.net/23aumh6u8s0i/5hj6fNoGfTuznEe5OPUf0v/01301315d8ae03ffa27f12e145bd6a7a/Screen_20Shot_202013-06-03_20at_205)

When the login is succesful you will see a green border and the result profile:

![ss-2013-06-04T10-51-04.png](https://images.ctfassets.net/23aumh6u8s0i/1gvjlQeEqNcRCKajADfURH/d0a418c8357fda43283890bfb51c04b4/ss-2013-06-04T10-51-04)

After we have finished the script, the login widget in our site will look like this:

![](https://images.ctfassets.net/23aumh6u8s0i/10x5ujAdevu4VbUhhZLIbF/cf937dbcfad1721fc251fa517459ce83/Screen_20Shot_202013-06-03_20at_205)

### Get started today

Read the [tutorial](https://docs.auth0.com/mysql-connection-tutorial) in our documentation page to get started.

<em>This feature is available in both the enterprise appliance and cloud version. [Try Auth0 yourself!](https://auth0.com)</em>

Introducing Db Connections

Today Amazon announced a new Login Service, which allows you to connect with millions of their customers

Today Amazon announced [a new Login Service](http://login.amazon.com), which allows you to connect with millions of their customers:

From their [press release](http://phx.corporate-ir.net/phoenix.zhtml?c=176060&p=irol-newsArticle&ID=1824961&highlight=):
> Today, Amazon launched __Login with Amazon__, a new service that will enable the over 200 million active Amazon customers to securely and simply login to apps, games, and websites. Login with Amazon allows developers to easily reduce sign-in friction for their customers, leading to higher engagement and order conversion.

The good news for those using Auth0, is that connecting with Amazon is just a click away. We launched support for Amazon today:

![SSO Amazon](https://images.ctfassets.net/23aumh6u8s0i/1i9UzNljbW660b6J3V2UgQ/5140b7e0b57be3a15622447bf6c7edbf/auth0-amazon-connection)



Auth0 gives you the ability to connect Amazon accounts with _any_ application: web, mobile or native; regardless of what platform it is written on, or what identity protocols it supports. Auth0 supports .NET, Java, Ruby, iOS, Android, Windows, and others with very few lines of code, and minimum intrusion.

And this extends of course to popular apps like __Salesforce__, __Zendesk__, __Dropbox__, __SharePoint__, __MSCRM__, among others. We keep adding popular apps and the list grows quickly!

There are two permission scopes available today in Amazon:

* __Basic Profile__, the default permission that allows you to retrieve the user's name, e-mail and a unique id.
* __Postal Code__, that allows you to retrieve the location of the user.

These two are very easily configured with Auth0 dashboard:

![SSO Amazon](https://images.ctfassets.net/23aumh6u8s0i/5ziOzwL0ROXtyy7UbFQl2y/6310397cd8dbf0a6b7df3f046c6c911d/auth0-amazon-dashboard)

Registration of your instance of Auth0 with Amazon is very straightforward and [fully documented](https://docs.auth0.com/amazon-clientid) right were you need it.

[Try Auth0 yourself!](https://auth0.com)

Authenticate users with Amazon accounts

We keep adding great apps to Auth0's portfolio. You can now setup SSO with Dropbox in just a few simple steps.

We keep adding great apps to Auth0's portfolio. You can now setup SSO with [Dropbox](http://www.dropbox.com) in just a few simple steps.

As usual, any of our [supported Identity Providers](https://docs.auth0.com/identityproviders) would work of course.

##How does it work?

Like other services, Dropbox implements the SAML Protocol for authentication and identity federation. Auth0 bridges SAML-P with whatever your preferred Identity Provider implements: SAML, OAuth 1, OAuth 2, LDAP, a SQL database, __anything__.



![](https://images.ctfassets.net/23aumh6u8s0i/2QR09Gfh9aW3I2n4oEgDHU/9920ec8bc71ae753121d3b583b349fed/dropbox-architecture)

##Setup

Configuring Dropbox in Auth0 is reduced to a single checkbox: __enable__. That's all you need to do.

![](https://images.ctfassets.net/23aumh6u8s0i/5BkHF6qJ8zS2rfOFxSr6JT/eeb410dfd9787b717fce390bed7e7b69/dropbox-auth0-setup)

After you enable it, you will need to complete the configuration on Dropbox. Just follow the instructions on the same page where you enabled it. You need two parameters:

1. The signing certificate
2. The Login URL

You are done!

> You can read more about Dropbox SAML SSO [here](https://www.dropbox.com/help/1909/en).

##Demo

In this very short demo you will see SSO with Dropbox, with users authenticating in Google Apps:

<iframe width="700" height="315" src="https://www.youtube.com/embed/NulZ33yrdwE?rel=0&vq=hd1080" frameborder="0" allowfullscreen></iframe>

[Try Auth0 yourself!](https://auth0.com)

SSO with Dropbox. Only a checkbox away

Last week we added support to Auth0 to integrate with Salesforce.com.

Last week we added support to Auth0 to integrate with Salesforce.com. This means that you can now enjoy SSO with Salesforce with any of our [supported Identity Providers](https://docs.auth0.com/identityproviders) in minutes.

##How does it work?

Salesforce implements the SAML Protocol for authentication and identity federation. Auth0 bridges SAML-P with whatever your preferred Identity Provider implements: SAML, OAuth 1, OAuth 2, LDAP, a SQL database, __anything__.



![](https://images.ctfassets.net/23aumh6u8s0i/5n0AUEXGPj9B3GImfXQMCz/1b868f7e80e0795260beb821861d2f72/salesforce-architecture)

> Salesforce provides a very handy SAML Validator that allows you to test the [SAML Responses](http://login.salesforce.com/help/doc/en/sso_saml_assertion_examples.htm) it expects. One small glitch is that even though the Validator will accept _deflated_ content, Salesforce itself won't. Not that you need to use this option, as responses will typically be small payloads. It's just a small inconsistency in the docs that might leave you scratching your heads.

##Setup

Configuring Salesforce in Auth0 is reduced to a single checkbox: __enable__. Can you think of a simpler way?

![](https://images.ctfassets.net/23aumh6u8s0i/4vepOzOyAqil83qVFgIVqZ/53d326fb248903341fe1ff085a403cdb/salesforce-auth0-setup)

Once you enable it, you need to complete configuration on Salesforce itself. You get all the instructions on the same page where you enable it. Three parameters are used on Salesforce:

1. The signing certifcate
2. The Issuer name
3. The Login URL

You are done!

##Demo

In this very short demo you will see SSO open Salesforce with users authenticating in Office365:

<iframe width="700" height="394" src="https://www.youtube.com/embed/bpJxCcQG4xY?rel=0&vq=hd1080" frameborder="0" allowfullscreen></iframe>

[Try Auth0 yourself!](https://auth0.com)

SSO with Salesforce.com and Auth0

Many companies rely on databases to store user credentials. Either because they use pre-built systems like ASP.NET Membership, or because they wanted to keep

Many companies rely on databases to store user credentials. Either because they use pre-built systems like ASP.NET Membership, or because they wanted to keep those users outside their main identity system (e.g. Active Directory) or just because of historical reasons ... (a.k.a. legacy)

In fact, one of the most requested features in ADFS was the ability to authenticate users _outside_ AD. A very annoying limitation in the product, that still has not been addressed.

Because this is so common, we decided to support it out of the box in Auth0. The __Auth0 Custom Connector__ is a component that you deploy to your infrastructure, that connects to any database (or anything really), and seamlessly integrates with Auth0.

Once setup is done (a very simple process in itself), you can continue to leverage those identities and connect them with any apps supported by Auth0: SharePoint, CRM, mobile, etc.

Here's the entire process in less than 3 minutes:



<iframe width="700" height="394" src="https://www.youtube.com/embed/p3rK7fgPEN0?rel=0" frameborder="0" allowfullscreen></iframe>

Notice that authentication with SQL (and MongoDb) is straight forward, but you can actually connect with whatever you want. This video shows an example that uses [edge](https://github.com/tjanczuk/edge) to call .NET code.

[Try Auth0 yourself!](https://auth0.com)

Custom Authentication With Auth0

0cd73f2f2f39709bd03646e9225cc3d3?s=200 avatar

0cd73f2f2f39709bd03646e9225cc3d3?s=200

I’m an engineer with a passion for building frictionless products. I’ve built effective teams and have grown them into successful engineering organizations. I like to forge a culture.

CTO and Co-founder

Matias Woloski

This week Microsoft announced the general availability of Windows Azure Active Directory (read ScottGu, Vittorio and Alex for the official word).

This week Microsoft announced the general availability of Windows Azure Active Directory (read [ScottGu](http://weblogs.asp.net/scottgu/archive/2013/04/08/windows-azure-active-directory-general-availability-new-backup-service-web-site-monitoring-and-diagnostic-improvements.aspx), [Vittorio](http://www.cloudidentity.com/blog/2013/04/08/windows-azure-active-directory-reaches-general-availability/) and [Alex](http://blogs.msdn.com/b/windowsazure/archive/2013/04/08/windows-azure-active-directory-ready-for-production-with-over-265-billion-authentications-amp-2-5-million-organizations-served.aspx) for the official word). We are _very_ happy to see this milestone happening. We've been privileged to have been working with their team for quite some time now, and we think it is great news for the identity community. Congrats again on the release! This opens lots of opportunities for developers.



## Why we think Windows Azure AD is important

> Every app that creates a new user database contributes to Global Warming, and kills millions of kittens :-) -- the internet

This last release of Azure AD contributes greatly to the adoption of [more modern identity architectures](https://resources.auth0.com/build-vs-buy-evaluating-identity-management/). Hundreds of thousands of companies rely on Active Directory today. Azure AD brings you closer to the (not anymore) utopia of connnecting organizations seamlessly and securely.

But what exactly is Azure AD? It [is _not_ a Domain Controller](http://weblogs.asp.net/scottgu/archive/2013/04/08/windows-azure-active-directory-general-availability-new-backup-service-web-site-monitoring-and-diagnostic-improvements.aspx#10122132) in the cloud. It is more like a combination of AD and ADFS with a more modern API to query the directory. It runs on the cloud and it can run as a the primary user directory for an organization or synced against an on-premise AD and federated with ADFS (it won't save passwords in the cloud). Even more enticing is the fact that it is free!

## How does Auth0 work with Azure AD?

On our side, we've just completed the integration of Windows Azure AD in Auth0, and it is already enabled for our customers.

<p class="small-image">
  <a href="https://images.ctfassets.net/23aumh6u8s0i/4hoe6VMIKljLe72AJWuEDA/e8d7a6e4c778f9806233fb051852a1e4/waad-auth0-diagram" target="_blank"><img src="https://images.ctfassets.net/23aumh6u8s0i/4hoe6VMIKljLe72AJWuEDA/e8d7a6e4c778f9806233fb051852a1e4/waad-auth0-diagram" alt="Auth0 Windows Azure Active Directory Diagram"/></a>
</p>

This means you can integrate your app with a single standard API and you will now enjoy easy access to Windows Azure AD and the rest of the identities we support: **Google Apps**, **on-premises Active Directory** **with** and **without** **ADFS**, user accounts stored in **SQL databases**, **Facebook**, **GitHub**, **LinkedIn**, **Twitter**, **PayPal**, etc.

<p class="small-image">
  <a href="https://images.ctfassets.net/23aumh6u8s0i/7yQ1trYHjbv5S01c7xiX9b/57bf567f6ccf83603969e3405bb843b8/waad-2" target="_blank"><img src="https://images.ctfassets.net/23aumh6u8s0i/7yQ1trYHjbv5S01c7xiX9b/57bf567f6ccf83603969e3405bb843b8/waad-2" alt="Windows Azure Active Directory configuration on Auth0 dashboard"/></a>
</p>

In summary, with Auth0 you get:



###1. Support for ANY kind of app

Using [our SDK](http://docs.auth0.com), it is straight forward to connect with users on Windows Azure AD and requires just a few lines of code. We support:

* Any .NET app: ASP.NET MVC3, 4, WebApi, ServiceStack
* Any device: iOS, Android, Windows Phone, Windows 8
* Any Platform: Java, Node.js, Ruby, PHP, etc.

Here is an example for iOS:

    Auth0Client *client = [Auth0Client auth0:tenant clientId:clientId returnUrl:returnUrl connection:@"customer.onmicrosoft.com"];
    [client showInViewController:self allowsClose:NO withCompletionHandler:^(BOOL authenticated)

Auth0 uses a non-intrusive, standard, small footprint approach for identity integration that works with any identity provider. If you are working on a platform not listed above, take into account that anything that talks HTTP(s) can connect with Auth0.

###2. Sign up companies with the Provisioning Widget

If your app will accept users from **multiple** Azure AD domains, you will need to configure it for multitenancy (see the [tutorial by Microsoft](http://www.windowsazure.com/en-us/develop/net/tutorials/multitenant-apps-for-active-directory/))

We have simplified this process with the __Auth0 Provisioning Widget__. With just a couple lines of JavaScript code your app can signup users from any organization, using __any__ identity system: Azure AD, Google Apps, AD, etc.

This single line of code will display the __Auth0 Provisioning Widget__ on your app:

    window.Auth0.showProvisioning('/yourapp/callback')

Here is how it would look (you would probably fire this from the control panel of your app)

<p class="small-image">
  <a href="https://images.ctfassets.net/23aumh6u8s0i/1DTj3mssgNk82UpqUqmvnQ/d3a30755a042870fc61a3c0bf3eae7f5/waad-provisioning" target="_blank"><img src="https://images.ctfassets.net/23aumh6u8s0i/1DTj3mssgNk82UpqUqmvnQ/d3a30755a042870fc61a3c0bf3eae7f5/waad-provisioning" alt="Provisioning Widget to easily create connections with Windows Azure AD"/></a>
</p>

This provides an easy way to add Single Sign On capability to your enterprise customers. You can also control the full user experience using the provisioning API instead of the widget.

###3. Query users from any provider

Once the organization/s have been provisioned through Auth0, you can query users of those organiztions through the __Auth0 Users API__. A very simple to use abstraction on a "Directory". Azure AD Graph API is of course different from Google Apps, or (on-premises) AD, or a Membership database. And [social logins](http://blog.auth0.com/2013/04/02/Auth0-Adds-Support-For-LinkedIn-PayPal-GitHub-Twitter-and-Facebook/) like LinkedIn, Google or Facebook; have no direct notion of a "Directory", but they do have equivalent concepts that bind people together (e.g. Friends, Contacts, Network).

This is Auth0 API explorer and we just did a `GET` on `/connections/yourganization2.onmicrosoft.com/users`. We keep the same API for every provider.

<p class="small-image">
  <a href="https://images.ctfassets.net/23aumh6u8s0i/23ROArFF40oHCiOoJmnQdT/da4c804ef15010b25e17ee119d942c1c/waad-api" target="_blank"><img src="https://images.ctfassets.net/23aumh6u8s0i/23ROArFF40oHCiOoJmnQdT/da4c804ef15010b25e17ee119d942c1c/waad-api" alt="Uniform Users API across providers"/></a>
</p>

###4. Native support for SharePoint, RMS, CRM, WAMS

Auth0 is already integrated with [SharePoint](http://blog.auth0.com/2013/03/04/On-Premises-SharePoint-Federated-with-Office-365-and-Google/), MSCRM, [Rights Management](http://blog.auth0.com/2013/03/15/Integrating-Auth0-with-Rights-Management-Services/) and [Azure Mobile Services](http://blog.auth0.com/2013/03/17/Authenticate-Azure-Mobile-Services-apps-with-Everything-using-Auth0/).

Connecting these apps with Azure AD is fully automated and straight forward. It requires no customization, or specially complicated steps for configuration. Simple steps that get you up and running very quickly.

###5. Mobile and native apps SDKs

If you are you building a mobile app on iOS or Android or Windows based devices, then again; authenticating users in Azure AD is readily available:

<p class="small-image">
  <a href="https://images.ctfassets.net/23aumh6u8s0i/4PC9uAr4Alka0iMjR7VmFj/7a111bdaee15adb84f7831047d222ded/waad-mobile" target="_blank"><img src="https://images.ctfassets.net/23aumh6u8s0i/4PC9uAr4Alka0iMjR7VmFj/7a111bdaee15adb84f7831047d222ded/waad-mobile" alt="Mobile Authentication with Windows Azure AD"/></a>
</p>

And if you enable the Azure Mobile Services add-on, we'll issue a token (JWT) compatible with it.

###6. Sign up from the Azure Store

We are part of the [Windows Azure Store](http://www.windowsazure.com/en-us/store/overview/). With a [few clicks](http://blog.auth0.com/2013/03/28/Auth0-Now-Available-In-The-Windows-Azure-Store/), you can have your own account, for free.

[Learn how to evaluate a modern identity management solution that fits your needs in this free eBook, Build vs Buy: Guide to Evaluating IAM.](https://resources.auth0.com/build-vs-buy-evaluating-identity-management/)

Why Windows Azure AD is important and how Auth0 works with it

If your app uses Auth0 for authenticating users, adding SSO with LinkedIn, PayPal, GitHub, Twitter and Facebook is just a click away.

If your app uses Auth0 for authenticating users, adding SSO with LinkedIn, PayPal, GitHub, Twitter and Facebook is just a click away:

![SSO LinkedIn PayPal Twitter Facebook](https://images.ctfassets.net/23aumh6u8s0i/5QzfRB3mY8rZ1sdvo9M1Z5/d79b7816acedd5a96f4b3b3b1e1972fe/auth0-li-pp-gh-tw-fb)

Each provider configuration page will allow you to fine tune the information you'd like your customers to disclose. As an example, when selecting PayPal you can choose to request:



![SSO PayPal](https://images.ctfassets.net/23aumh6u8s0i/60ridb4T2az6GMSuVUTjt/0d8cb7b520a8f1fb0c868146e52b89f3/auth0-paypal)

Facebook is particularly prolific in profile scopes, but we've added explanations to each one to help you choose the right ones:

![SSO PayPal](https://images.ctfassets.net/23aumh6u8s0i/JPdCVyLWfLxDW0yarDsmZ/6f7c2e1ac52fc3ad4af8e97f272cfc62/auth0-fb)

Registration of apps with each of these providers is different and sometimes difficult to find online. We've documented all of them, accesible right from each configuration screen:

![SSO GitHub](https://images.ctfassets.net/23aumh6u8s0i/6SGWlvUK5rL7MxwuOYyD8N/11e6f5145684a18d84edb3941b8cf045/auth0-github)

Here's a list for your reference:

* [Facebook](https://docs.auth0.com/facebook-clientid)
* [LinkedIn](https://docs.auth0.com/linkedin-clientid)
* [GitHub](https://docs.auth0.com/github-clientid)
* [Twitter](https://docs.auth0.com/twitter-clientid)
* [PayPal](https://docs.auth0.com/paypal-clientid)

Finally, the __Auth0 Login Widget__ will show the new connections if you enable them:

![SSO social login widget](https://images.ctfassets.net/23aumh6u8s0i/425HUU680SM4phAquCqxaE/d08b3317ec442e877635db6dfe7deaec/auth0-social-login-widget)


[Try Auth0 yourself!](https://auth0.com)

Auth0 adds support for LinkedIn, PayPal, GitHub, Twitter and Facebook

We are very happy to announce that Auth0 is now available in the Windows Azure Store as an Add-on. Integrating it into your Azure apps is now even easier

We are very happy to announce that Auth0 is now available in the Windows Azure Store as an Add-on.

![azure store addon](https://images.ctfassets.net/23aumh6u8s0i/2XZ6FWrrGavSqopjJ5gFMu/b2e23c440c92f1f5eb15d19cbeef0a6f/auth0-azurestore-portal)



Integrating it into your Azure apps is now even easier, and takes just 2 steps:

###1. Enter the name of your Auth0 instance:

![azure store addon](https://images.ctfassets.net/23aumh6u8s0i/lyEKcuPOcujZBbaSu0D4s/4412a92a6d1a2039cc625d6578f9e8a6/auth0-azurestore-name)

This name will be used to generate your own domain in Auth0:

```
https://{NAME}.auth0.com
```

###2. Complete the purchase:

![azure store addon](https://images.ctfassets.net/23aumh6u8s0i/7CU5EZSGyEYAjpFO35g4ej/668345cc5af5438597e440d1a9962946/auth0-azurestore-purchase)

After a couple minutes, your instance of Auth0 will be provisioned and ready to use right from the Windows Azure Portal.

![azure store addon](https://images.ctfassets.net/23aumh6u8s0i/6iDbEbliWNzUdVBXKlCkCM/d0f27a60bf4dacdaff204f3b360dc15f/auth0-azurestore-manage)

When you click on __"Manage"__, you will be taken to Auth0's dashboard. No other credentials are required as we are completely integrated with Azure.

You'll see a welcome message from [Matias](https://twitter.com/woloski) and links to [tutorials](https://docs.auth0.com/azure-tutorial) to get you started:

![azure store addon](https://images.ctfassets.net/23aumh6u8s0i/6rZYNZhN6pkUFVkPsleut3/ecfe2765dca792e21805076b0d9b9e0c/auth0-azurestore-auth0portal-welcome)

That's it! Feedback is very much welcome. Please connect with us on the [our chat room](http://chat.auth0.com) or [open a support ticket](https://support.auth0.com).

We want to thank the Windows Azure team for their support in getting this done. A special thanks to [Bilal Aslam](http://www.linkedin.com/in/bilalaslam)!

If you are developing on node.js, and are interested in creating add-ons for Windows Azure, check out the basic template we published [here](https://github.com/auth0/node-azure-store). It'll save you some time.

> During the beta period we are offering Auth0 for free up to 1000 users. That should give you plenty of room for testing.

Auth0 now available in the Windows Azure Store

We are very excited to announce Auth0 (AuthZero). Auth0 is identity management that "just works". It's about removing the pain of developing

We are very excited to announce [Auth0 (AuthZero)](https://auth0.com).

Auth0 is identity management that __"just works"__. It's about removing the pain of developing, deploying, troubleshooting and operating a modern, advanced identity management system.

Auth0 allows developers to easily connect their apps with common enterprise identity providers: Office365, Google Apps, Active Directory, OpenLDAP, SQL databases; and social/consumer ones: LiveID, Google, Twitter, FB, etc.

We offer automated on-boarding and setup, single-sign-on, a uniform and simple to use API for querying user directories, and logging and auditing.

![](https://images.ctfassets.net/23aumh6u8s0i/5vN4n2LiSa7DP6HtnhECtz/9286334782cdb64a0ce25571d6ac9905/auth0-hilevel-arch)

Auth0 is offered as a service, but supports multi-modal deployments: runs in the public cloud, in a private cloud controlled by Auth0, or in a private cloud (AWS only) controlled by the customer.

"announcements"