Auth0 Resources

Query Auth0 tenants for applications and the grant types, callback URLs, and token settings they use, connections and the password policies and multifactor requirements they enforce, users with their roles, identities, and login history, resource servers and the scopes they expose, plus organizations, roles, actions, log streams, and attack protection settings covering brute force, breached password detection, and suspicious IP throttling. Use cnspec to find applications with overly broad callback URLs and connections that never require multifactor authentication, and assess Auth0 against Mondoo Platform policies.