auth0_by_okta_hero copy

Auth0 by Okta Team

**TLDR**: 
Self-service customers have access to Auth0 capabilities that previously required a call with sales. Effective immediately: (1) customers can now upgrade to our B2B Professional Plan directly through the dashboard, (2) the Enterprise Connection limit in the B2B Pro plan has been increased from 3 to 5, and (3) Pro plans customers can now add a single Enterprise MFA factor (called 'Enterprise MFA Lite') via self-service.

In November 2023, we introduced [updated self-service plans and pricing](https://auth0.com/blog/upcoming-pricing-changes-for-the-customer-identity-cloud/) to scale with our customers. As a continuation of this work and based on your feedback, we now offer self-service customers easier access to plans and capabilities that previously required a discussion with sales.

### Here’s what’s new, effective May 2024:

* You can now choose our [B2B Professional Plan](https://auth0.com/pricing) using your dashboard! The B2B Pro Plan includes: 
    * 5,000 M2M Authentications (more available as add-ons)
    * M2M Add-on
    * External Database
    * Cross App SSO
    * 5 Enterprise Connections (increased from 3)
    * 100 organizations
    * And other features included in the B2B Essentials plan.

    _To upgrade: [Dashboard > Settings (Subscription Tab)](https://manage.auth0.com/#/tenant/billing/subscription) > Select Plan & Quota > Click Upgrade or you can continue to purchase this plan through our Sales team._

* **5 Enterprise Connections** for the B2B Professional Plan's Enterprise Connection limits have increased from 3 connections to 5 connections via self-service. This will allow more of our SaaS customers to scale more effectively. As a reminder, there is no limit on [Okta Enterprise Connections](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta) for customers on all of our B2B plans.
* **Enterprise MFA Lite** is now available through self-service for both B2C and B2B Professional. This capability was only available via a contract with Sales, but it can now be added via the dashboard.
    * Enterprise MFA Lite allows you to add either SMS, push, or voice notifications to Professional plans for an additional fee. Fees vary by the amount of MAUs; find more information on [Dashboard > Settings (Subscription Tab.)](https://manage.auth0.com/#/tenant/billing/subscription)
    * This includes the support of push, [SMS, and voice notifications](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa), (SMS charges for MFA are charged separately by carriers supported by Auth0). Under Enterprise MFA Lite, subscriptions will be limited to one MFA factor on the subscription. 

### MFA Offerings Explained

MFA ([Multi-Factor Authentication](https://auth0.com/blog/multifactor-authentication-mfa/)) provides a method to verify a user's identity by requiring them to provide more than one piece of identifying information. For example, **something you know**: a password, PIN, or security question, **something you have**: a smartphone, security token, or smart card, or **something you are**: your fingerprint, face scan, or voice pattern.

Some of our MFA offerings include: 

* **Pro MFA** &mdash; included in B2C Professional, B2B Essentials, B2B Professional, and Enterprise plans 
* **Enterprise MFA Lite Add-on** &mdash; an add-on for B2B and B2C Professional plans and Enterprise plans
* **Enterprise MFA** &mdash; included in our Enterprise Plans 

![Pro Plan Improvements for Self-Service Customers - May 2024](https://images.ctfassets.net/23aumh6u8s0i/sTrHbEBf42kTVlbfp6mRt/2459de4604259c2031a9808dd2111efa/MFA_Table.png)

<div class="alert alert-info alert-icon">
  <i class="icon-budicon-487"></i>
  <b> Please note that upgrading to B2B Professional and adding Enterprise MFA Lite to B2B and B2C Professional plans will incur additional fees. Visit our <a href="https://auth0.com/pricing">pricing page</a> for more information.</b><br> 
</div>

### Which MFA factor(s) are best for my product?

Choosing the right [MFA factor](https://auth0.com/docs/secure/multi-factor-authentication#mfa-factors) is all about striking a balance between security and user experience. Consider the sensitivity of the accounts you're protecting, the technical comfort level of your users, and the accessibility of the MFA factor across different devices. 

![Not All MFA is Created Equal](https://images.ctfassets.net/23aumh6u8s0i/5TgjqFrUJwTDkldGCqov7o/6d80ca9d9c0d29faebea01578a02e0b6/Not_All_MFA_is_Created_Equal.png "Not All MFA is Created Equal")
<p align="center"><i>From blog post: <a href="https://auth0.com/blog/not-all-mfa-is-created-equal/">Not All MFA is Created Equal</a></i></p>

<p align="left"</p>
To help evaluate our MFA offerings, visit this [blog post](https://auth0.com/blog/not-all-mfa-is-created-equal/) to learn about your options and for more details on factor types and authentication assurance levels, check out [this datasheet](https://www.okta.com/resources/datasheet-factor-assurance/).

### Have more questions about your plan or our MFA offerings?

We’re here to help! If you’re on a paid plan, our [Support team](https://support.auth0.com/) can help, and if you’re on a free plan, you can post in our [Community forum](https://community.auth0.com/). Thanks for being a valued customer. We hope this allows for more flexibility and optionality during your auth journey. Happy authenticating!

Pro Plan Improvements for Self-Service Customers - May 2024

Unforgettable.
Remarkable.
Impactful.
Authentic.
Passionate.
Legendary.
Generous.

These are just a few words that echo in conversations and stories about Vittorio. Of course, "That hair!" is a repeat exclamation, eliciting tales of hair product recommendations and best practices. But Vittorio was so much more than can be summarized in a list.

Vittorio was larger than life. His is an inspiring story of humble beginnings and a testament to what passion, drive, and grit can build. He was a titan who powerfully shaped the identity industry and won hearts while he did it. While his time with us could never be long enough, there is no shortage of things to celebrate about Vittorio Bertocci.

## The Man

Born in a small village in Italy as the 10th child of a janitor, Vittorio's journey to the international stage was hard-earned. He worked tirelessly to put himself through school, and with the love and support of his family and wife, he steadily grew his influence and expertise to global acclaim.

![Vittorio](https://images.ctfassets.net/23aumh6u8s0i/3EZw6eOYsQzoaMfOfPQ5yg/3b62471788031c2270092fdaeee7a1c9/vittorio-post.jpg)

Vittorio was known for a lot of things in the identity industry. First and foremost, of course, was his technical depth: very few people in the world knew identity as well as Vittorio. In many ways, he helped create identity as an industry rather than as an afterthought. Vittorio sat on the [Board of Directors of the OpenID Foundation](https://openid.net/foundation/board/), authored [two IETF RFCs](https://datatracker.ietf.org/person/vittorio@auth0.com) that became part of the OAuth 2.0 protocol, [worked closely with the FIDO Alliance](https://fidoalliance.org/welcome-message-from-our-judges/), and was hugely influential on Auth0 and Okta’s product roadmaps.  

But even among the leading experts in the industry, Vittorio stood out not only for his expertise in identity but for his passion and drive to "level up the world's identity IQ." He cared deeply about teaching the rest of the world about identity and why he found it so important. In the early days, he [wrote books](https://www.amazon.com/stores/Vittorio-Bertocci/author/B001JSFAPC?ref=ap_rdr&store_ref=ap_rdr&isDramIntegrated=true&shoppingPortalEnabled=true). Later, he [created and hosted a podcast](https://identityunlocked.auth0.com/public/49/Identity%2C-Unlocked.--bed7fada), authored [blogs](https://auth0.com/blog/our-take-on-passkeys/), and spent a lot of time traveling around the globe to major industry events, speaking, selecting talks, and helping others improve their content. He was driven by the idea that not only should he hold himself to a high standard, but he should also help everyone else raise the bar. **Vittorio couldn’t fathom a world where people built identity products without understanding the identities they were protecting. He helped build the machinery behind the login box because he saw so acutely the people who were in front of it.** 

## His Impact and Legacy

A veteran in the identity industry, Vittorio had a lengthy career with Microsoft, working with Fortune 100 and Global 100 companies. He contributed to the inception and launch of Microsoft's claims-based platform components (Windows Identity Foundation and ADFS, ADAL and MSAL SDKs, and ASP.NET middleware).

At Auth0 and Okta, Vittorio was a long-standing contributor and thought leader in all aspects of the identity industry and domain. His forward-thinking commentary made him an in-demand voice at industry events worldwide, including Identiverse, BUILD, PDC, TechEd, EIC, Cloud Identity Summit, and many others. 

Vittorio struck an unusual balance of pragmatism without veering away from doing what is right. In his countless panels, interviews, and general discussions, he always defended the need to protect the privacy of every customer, user, consumer, citizen, or whatever other persona identity technology is meant to protect.

Vittorio's impact on colleagues and the entire identity community has been tremendous. His work lives on in standards and protocols, books, podcasts, and presentations to help educate and advance the identity industry for years to come. The following is a small representation of Vittorio's work and influence. 

### Standards, protocols, and resources

* IETF RFCs:
    * [JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://datatracker.ietf.org/doc/rfc9068/) (2021)
    * [OAuth 2.0 Step Up Authentication Challenge Protocol](https://datatracker.ietf.org/doc/rfc9470/) (2023)
* Board of Directors: [OpenID Foundation](https://openid.net/foundation/board/)
* Open source visual language for identity: [Identicons](https://identicons.dev/)

### Books, publications, and training materials

* Book: [Modern Authentication with Azure Active Directory for Web Applications](https://www.amazon.com/Authentication-Directory-Applications-Developer-Reference/dp/0735696942/ref=as_sl_pc_tf_til?tag=wwwcloudident-20&linkCode=w00&linkId=PPVHCRCDWQ4K4EJO&creativeASIN=0735696942)
* Book: [Programming Windows® Identity Foundation](https://www.amazon.com/gp/product/0735627185?ie=UTF8&tag=wwwcloudident-20&linkCode=as2&camp=1789&creative=9325&creativeASIN=0735627185)
* Book: [A Guide to Claims-Based Identity and Access Control](https://www.amazon.com/Claims-Based-Identity-Control-Patterns-Practices/dp/0735640599/)
* Book: [Understanding Windows CardSpace: An Introduction to the Concepts and Challenges of Digital Identities](https://www.amazon.com/Understanding-Windows-CardSpace-Introduction-Challenges/dp/0321496841/)
* Ebook: [OAuth2 and OpenID Connect: The Professional Guide](https://auth0.com/resources/ebooks/oauth-openid-connect-professional-guide)	
* Whitepaper: [Single Sign-On from Active Directory to a Windows Azure Application](https://www.microsoft.com/en-us/download/details.aspx?id=13789)
* Article: <a href="https://learn.microsoft.com/en-us/previous-versions/cc836390(v=msdn.10)">Claims and Identity, On-Premises and Cloud Solutions</a>
* Article: [Secure ASP.NET Web API with Windows Azure AD and Microsoft OWIN Components](https://learn.microsoft.com/en-us/archive/msdn-magazine/2013/november/asp-net-web-api-secure-asp-net-web-api-with-windows-azure-ad-and-microsoft-owin-components)
* Article: [Re-Introducing the Windows Azure AppFabric Access Control Service](https://learn.microsoft.com/en-us/archive/msdn-magazine/2010/december/msdn-magazine-microsoft-azure-re-introducing-the-microsoft-azure-access-control-service)
* Training video: [Learning Identity](https://auth0.com/docs/videos/learn-identity-series)

### Podcasts and interviews

* Host of [Identity, Unlocked](http://identityunlocked.com/) 
* Interview with Identity at the Center: [OAuth 2.0 Step Up Authentication Challenge Protocol with Vittorio Bertocci](https://www.identityatthecenter.com/listen/episode/dcd723b5/237-oauth-20-step-up-authentication-challenge-protocol-with-vittorio-bertocci)

## In Their Words: Stories of Leadership, Passion, and Excellence

Working with Vittorio, learning from him, and having the privilege of simply being in his orbit leaves a lasting imprint, as evidenced by the following stories, memories, and heartfelt thoughts from colleagues and colleagues turned friends. 

“His authenticity came out on stage, in our team meetings, and around the table whenever we broke bread. We are all richer for having shared space with him, and I am deeply thankful for the time I spent working alongside him.”

“Saying that Vittorio is a bona fide Principal Architect is a bit like saying Michelangelo is a bona fide artist.”

“Vittorio and I had a running joke, given both our names are uncommon: what is our latest Starbucks name? I built my understanding of the identity space by watching and reading Vittorio's training videos and blogs. His persistence in adopting the right standards to help unlock the world of passwordless is valuable, and the impact of his work will be felt for years. In addition to identity standards questions, Vittorio would get questioned about his long, beautiful curls. Vittorio would then seamlessly incorporate these questions into his talk tracks to make any topic fun and engaging. From his passion for helping everyone understand the role of identity to engaging with everyone on almost any topic thoughtfully, he always left an impression on the group and me. His loss is a massive loss for the identity industry and certainly for Okta.”

“Greater than life. Unforgettable. He left a mark on everyone he met. Despite the tragedy, his legacy will have a remarkable impact in the industry but, more importantly, in the lives of so many souls. The knowledge, the energy, the wit, the hair, the flair. Isaac Newton famously said: "If I have seen further, it is by standing on the shoulders of giants." The entire identity industry stood on Vittorio's shoulders. No second I spent with Vittorio was ever wasted. From intense work-related debates and passionate agreements (and disagreements) to incredibly amusing random topics, I can never recall a dull moment. This quote embodies how I perceived his living from another great Italian, Michelangelo: ‘There is no greater harm than that of time wasted.’”

“Vittorio put humans first in everything he did and touched. When he explained complex standards and protocols to me, he put them in a context I would easily understand from an end-user perspective. He would simplify and put the debates about certain implementations that would expose us or the user from a security or privacy standpoint in the context of the user. He would humanize the complex topics he presented at our kick-offs, offsites, and conferences. He would weave his self-deprecating humor in them. In his quest to impart his knowledge and wisdom on Identity to us, Vittorio ended up leaving a remarkable Identity of his own behind with us. I am grateful for his patience and passion – for teaching me and pushing me to be a better leader in our industry. I am grateful for the many laughs, debates, glasses of prosecco, and hours we spent together. I am grateful to have known such a remarkable person. Vittorio, you will be greatly missed.”

“Vittorio was passionate about ensuring that everything he said was accurate. He would spend a lot of time crafting and recrafting his statements, researching the meanings of words, and trying to find an accurate English representation of an Italian phrase. He extended this to others as well. Always helping them present their best selves forward when creating reusable assets or speaking at a conference.”

“I met Vittorio on my first day of onboarding. He was teaching Identity 101 to new hires with the same energy as a conference stage. He gave his knowledge selflessly. To the standards bodies developing the backbone of the internet. Through thousands of papers, podcasts, interviews, keynotes, and the infamous Identicons. To my little brother when he decided to grow his hair long and use Olaplex shampoo. To every Starbucks employee who wrote ‘Victoria’ on his cup. Vittorio will be with us for a long time, because he shared himself with the world.”

“I still remember the first time I watched one of Vittorio's videos explaining WS-Trust in 2006. The subject hooked me immediately. His passion and clarity in explaining the complexity of federated identity was unique. That was the seed that later became Auth0 in 2013. I am lucky that our paths crossed. Every 1:1 was an opportunity to learn, to discuss the little details, the dynamics in working groups, product ideas, SDK experience, fossils, food, travel… I will miss you, my friend. Your legacy will always be remembered.”

“I met Vittorio for the first time in Microsoft’s Building 20, a place where magic happened. This was in 2008. In this case, he was the magician. That first master class in identity on a whiteboard led to co-authoring a book with him, then another one, and later on to founding Auth0. I finally convinced him to join Auth0, and the rest is history. You were always so generous with your knowledge, wisdom, and humor. I am so grateful for all the moments we shared along these extraordinary years. Grazie carissimo.”  

## In the Spirit of Giving

Two causes of importance to Vittorio and his family are higher education for low-income students and pancreatic cancer research. If you feel inspired to do so, you can donate in his honor to: 

- [https://www.questbridge.org/donate](https://www.questbridge.org/donate)
- [https://pancan.org/ways-to-give/](https://pancan.org/ways-to-give/)

<AmpContent>
<amp-youtube
    data-videoid="kOHe7WMCpII"
    layout="responsive"
    width="480" height="270">
</amp-youtube>
</AmpContent>
<NonAmpContent>
<div class='embed-container' style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden; max-width: 100%;margin-bottom:40px;"><iframe style="position: absolute; top: 0; left: 0; width: 100%; height: 100%;" src='https://www.youtube.com/embed/kOHe7WMCpII' frameborder='0' allowfullscreen></iframe></div>
</NonAmpContent>


In Celebration of Vittorio Bertocci

### SUMMARY
In alignment with our core values of transparency and loving our customers, we are sharing context and details around a recent security event affecting Auth0 code repositories from October 2020 and earlier, which pre-dates the Okta acquisition of Auth0. Our investigation has not revealed any customer impact from this event, and no action is required by our customers. Additionally, we confirm that the Auth0 service remains fully operational and secure.

### SCOPE
The security event detailed below pertains to Auth0 code repositories from October 2020 and earlier, which pre-dates the Auth0 acquisition by Okta. It does not pertain to any other Okta products.

### EVENT
In late August, a third-party individual notified Okta that they possessed a copy of certain Auth0 code repositories dating from October 2020 and earlier. We immediately launched a thorough internal investigation and enlisted the services of a leading third-party cybersecurity forensics firm. Both investigations, recently concluded, confirmed that there was no evidence of unauthorized access to our environments, or those of our customers, nor any evidence of any data exfiltration or persistent access.

Additionally, given our robust commitment to security, we have taken precautionary steps to ensure that this code cannot be used to access company or customer environments. We have also notified law enforcement. The Auth0 service remains fully operational and secure.
<br>

Keeping customer data secure is one of our top priorities and we take this responsibility very seriously. We greatly appreciate our customers’ trust and partnership.

Auth0 Code Repository Archives From 2020 and Earlier

### 概要

当社のコアバリューである「情報を透明にする」と「お客様を大切にする」に基づき、2020年10月以前のAuth0コードリポジトリ（OktaによるAuth0買収以前のもの）に影響を与える最近のセキュリティ事象に関する背景と詳細を共有いたします。弊社の調査により、この事象によるお客様への影響は確認されておらず、お客様には何の対応も必要ありません。また、Auth0のサービスは引き続き完全に稼働しており、安全であることを確認しています。

### 範囲

以下に詳述するセキュリティ事象は、2020年10月以前のAuth0コードリポジトリに関連しており、OktaによるAuth0買収以前のものです。他のOkta製品には関係ありません。

### 事象

8月下旬、第三者から、2020年10月以前の特定のAuth0コードリポジトリのコピーを保有しているとの連絡がOktaにありました。当社は直ちに徹底的な内部調査を開始し、大手サードパーティのサイバーセキュリティ・フォレンジック会社のサービスを利用しました。両調査とも最近終了し、当社およびお客様の環境への不正アクセス、データの流出や持続的なアクセスの証拠はないことが確認されました。


さらに、セキュリティに対する当社の強固なコミットメントに基づき、このコードが会社やお客様の環境へのアクセスに使用されないよう予防措置を講じました。また、法執行機関にも通知しています。Auth0サービスは、引き続き安全にご利用いただけます。

お客様のデータを安全に保つことは、当社の最優先事項の一つであり、この責任を非常に重く受け止めています。お客様の信頼とパートナーシップに感謝いたします。

Auth0 by Okta Team

Pro Plan Improvements for Self-Service Customers - May 2024

In Celebration of Vittorio Bertocci

Auth0 Code Repository Archives From 2020 and Earlier

2020年以前のAuth0コードレポジトリについて

Try for free today