auth0_by_okta_hero copy

Auth0 Team

A crash course on securing AI agents and humans

**TL;DR:** [dev_day(25): Auth for Agents](https://developerday.com/) is a one-day, free, virtual crash course on auth for AI agents and humans with Auth0. [RSVP today to join us on June 18th](https://developerday.com/rsvp).

AI Agents are taking over the tech space — whether it's hackathon projects, startup pitches, or LinkedIn think pieces on how you can leverage, build, and deploy them. According to [LangChain’s State of AI Agents Report 2024](https://www.langchain.com/stateofaiagents), 78.1% of the companies surveyed are currently developing an agent with plans to put it in production, and 51.1% currently have agents in production. 

You might be thinking about or already developing the next AI agent. Doing so comes with these challenges:

* How will your AI agent identify its users?
* How will your AI agent access what it needs securely?
* How will your AI agent call external tools and APIs?
* How will your AI agent know which documents to surface to which users without leaking sensitive information?

Whether you’re an expert or brand new to building AI agents, [dev_day(25): Auth for Agents](https://developerday.com/) has content for you. dev_day(25) is a one-day event discussing auth for AI agents and humans, identity best practices, and Auth0's latest identity and security features. It’s virtual and free so you can learn and build right from your preferred location. 

Here’s what’s in store: 

- Don’t miss the keynote: *The Future of Identity in GenAI Applications*, where Auth0 President Shiven Ramji and Auth0 Staff Developer Advocate Deepu Sasidharan unveil Auth for GenAI, a solution to secure and scale the identity needs of your AI applications
- Code along with the "Auth-ing" your GenAI Assistant workshop led by Auth0 Senior Developer Advocate Jess Temporal.
- Don't miss the panel discussion: How GenAI is Rewriting the Developer Experience, featuring leaders from LangChain, Llamaindex, Vercel, and Auth0.

There will be more opportunities to level up your approach to auth when building AI agents. Not to forget - what would be an event without some giveaways?

We get it; June 18th is during the week, and it might be hard to slip away from all of your to-dos. We’ve got you covered with a few ways to convince your manager that you’ll leave dev_day with key insights from leaders at Auth0 and the broader GenAI ecosystem,  hands-on experience securing your AI applications with our workshop, and tips and tricks to better secure your applications and users. 

#### 🧠 10 Ways to Convince Your Boss to Let You Attend dev_day(25)

1. **"It’s basically free training!"**: Think of it as a FREE security workshop that makes me better at protecting our app. Budget win!

2. **“GenAI is on our roadmap… right?”**: This is the event about identity for GenAI apps. If we're building smart apps, we need smart auth.

3. **"Look at all these acronyms!"**: OIDC. PKCE. RBAC. AI. JWT. Your boss doesn’t need to know what they mean. They just need to know you’ll understand them after Dev Day.

4. **“There are no travel costs.”**: It’s online. It’s live. No hotel, no airport coffee, no awkward name tags. Just glorious knowledge.

5. **"We literally use Auth0."**: This is like getting insider secrets directly from the mothership. Why wouldn’t we want that?

6. **“You can finally stop me from complaining about auth!”**: One day of Dev Day = 364 days of not ranting about token lifetimes in standups.

7. **"It’s future-proofing our security strategy."**: And we love future-proofing. Just ask that dusty QR code printer we bought during lockdown from TikTok shop.

8. **"There’s a session on securing agents. Like, the AI kind."**: Bond-level cool. Cyber-secure. Next-gen stuff. You’ll look visionary for sending someone.

9. **“Networking with other devs!”**: (Also known as lurking in chat and reacting with 🔥 emojis, but still counts.)

10. **“You’ll get the recap over coffee.”**: Let me break down AI authentication models for you over a cappuccino.

Have any questions or feedback? Let us know on our [dev_day(25) community forum](https://community.auth0.com/t/welcome-to-the-devday-2025-forum/147336). 

> So grab your popcorn and [RSVP for dev_day(25): Auth for Agents](https://a0.to/blog/devday25-rsvp) today. We’ll save you a seat! 


What to Expect at dev_day(25): Auth for Agents

carla_urrea

I've been working as a software engineer since 2014, particularly as a backend engineer and doing system design. I consider myself a language-agnostic developer but if I had to choose, I like to work with Ruby and Python.  

After realizing how fun it was to create content and share experiences with the developer community I made the switch to Developer Advocacy. I like to learn and work with new technologies. 

When I'm not coding or creating content you could probably find me going on a bike ride, hiking, or just hanging out with my dog, Dasha. 

Senior Developer Advocate

Carla Urrea Stabile

Developer Day 2024 is a wrap and Auth0 announced some cool stuff! Let's recap some of them in this blog post.

Yup, Developer Day 2024 is a wrap! 

We hosted a 24-hour virtual event with unique content regardless of your timezone! But do not despair— if you want to go back, you can check out the announcements, [all sessions](https://a0.to/devday24/sessions) and [labs](https://a0.to/devday24/labs). In the meantime, let's take a look at some of the cool stuff Auth0 announced and what is new with the product!


## 🤑 Improvements in Pricing & Plans

Let's start with (what I think) is one of the best announcements 😏. We heard the feedback from developers, and we want to make application security accessible to everyone, so we're adjusting pricing and what's included in plans in response. So, let's take a look at some of the changes in our plans:

### Expanding Free Tier

What's included in the new plan?: 
- Increase in the number of Monthly Active Users (MAUs) **from 7,500 to 25,000 MAUs.**
- Now you have **unlimited social connections and Okta connections**.
- You can have **up to 5 Organizations** and use **Passwordless**.
- You can set **up to 5 Actions.**
- You can configure your **own custom domain.**


### Expanding Paid Plans

- **Organizations are included in every plan**, with sign-up and login customization starting from the B2C Essentials plan.
You have **unlimited Okta connections**, which allow you to integrate your applications easily with Okta Workforce Identity Cloud.
- **MFA** included in all Enterprise plans!

## 🚀 Login Experience & Extensibility

Every company has its own authentication requirements, and Auth0 wants to make sure most of them, if not all, are available, so let's take a look at some improvements: 

### Add Custom Prompts to Sign-Up and Login

You can now [add custom prompts to your sign-up and login boxes](https://auth0.com/docs/customize/login-pages/universal-login/customize-signup-and-login-prompts). Now you could, for example, add extra user information like their full name, phone-number, without leaving the authentication process. You could also show them a prompt with your Terms and Conditions so they can consent before registration. Most importantly, you can validate all the data you gather using Auth0 Actions!

![Custom Prompts from Docs](https://images.ctfassets.net/23aumh6u8s0i/4LCBduxiYIaC2UWU87FAct/044c25887847927b56d6975b0d1d29ac/Screenshot_2024-07-22_at_13.37.03.png)

<div class="alert alert-info alert-icon">
  <i class="icon-budicon-487"></i>
  <strong>Friendly Reminder!</strong><br> 
 Be prepared for End-of-Life: Don't forget to <a href="https://auth0.com/blog/preparing-for-rules-and-hooks-end-of-life/">migrate your Rules & Hooks to Auth0 Actions before November 18th!</a>
  <br> 
</div>

### Auth0 Forms

Auth0 Forms allows you to create custom forms and extend your identity flow using a visual editor. You no longer need to redirect your users outside of Auth0 to achieve this. [Check out the docs here to learn how to do it.](https://auth0.com/docs/customize/forms)

![Auth0 Forms from Docs](https://images.ctfassets.net/cdy7uua7fh8z/3QLVE6XsMRwhL17SUSMw8H/c679b99a8930d463a30352e1d11ee755/2024-05-09_14-20-42.png)

## 🚦 MFA Customization with Actions

Now, you can enroll your users in specific factors using the post-login flow in Actions. You can also prompt users to enroll in SMS for one application while encouraging them to enroll in push notifications or WebAuthn for a different application. [Learn more on how to customize MFA here.](https://auth0.com/docs/secure/multi-factor-authentication/customize-mfa/customize-mfa-enrollments-universal-login)

## 🤩 New APIs: Sessions & Refresh Tokens Management APIs

We've released new APIs! Here's everything you need to know: 

### Session Management API 

The [Sessions Management API](https://auth0.com/docs/manage-users/sessions/manage-user-sessions-with-auth0-management-api) provides you a set of endpoints of the Management API that allows you to manage active authenticated sessions, enabling you to close those deemed redundant or a security risk. 

### Refresh Tokens Management API 

The [Refresh Tokens Management API](https://auth0.com/docs/secure/tokens/manage-refresh-tokens-with-auth0-management-api) allows you to list and revoke refresh tokens and make your applications more secure and consistent.

## 🔐 New Features in Okta FGA 

Earlier this year, we released [Okta FGA](https://docs.fga.dev/), a highly scalable authorization service powered by [OpenFGA](https://openfga.dev/); apart from that, the team has been working hard to add more features: 

- Create multiple credentials for a single Okta FGA store with different permissions depending on how you want to use it. You can [learn more about how to do this by reading the docs](https://docs.fga.dev/integration/getting-your-api-keys). 
- [Modular Models](https://docs.fga.dev/modeling/modular-models) so you can compose an authorization model from multiple modules; this feature comes in handy in scenarios where your authorization model grows too large, and it isn't easy to understand or when your team grows, and ownership boundaries are not clear enough. 

## 🏢 Highly Regulated Identity (HRI)

[Highly Regulated Identity](https://auth0.com/docs/secure/highly-regulated-identity) is Auth0’s feature set that enables the development of secure applications that comply with critical international regulations such as Open Banking, Financial Data Exchange, and Consumer Data Rights. It is now available as an optional security add-on for Enterprise plan customers.

Among other things, Highly Regulated Identity provides you with the following:
- Advanced security with OpenID Connect.
- Strong Customer Authentication, which supports compliance with Europe’s Payment Services Directive (PSD2)
- Strong Application Authentication allows you to implement the FAPI 1 Advanced Security profile using Private Key JWT or mTLS for OAuth.
- Token Binding adds the ability to bind an access token to your application, preventing unauthorized access even when a token is compromised.

## 🤖 Bot Detection Improvements

We are introducing Auth Challenge, a new and improved bot response available in Bot Detection. 

Auth Challenge is the default bot detection response, which provides a CAPTCHA-free user verification. It leverages a series of non-intrusive browser challenges to set the difficulty of the challenge, making it tougher on bots and easy for humans. You can [learn more about it in the Bot Detection docs.](https://auth0.com/docs/secure/attack-protection/bot-detection)

## 👥 Introducing Auth0 Teams

Auth0 Teams provides a single point of visibility and control over your Auth0 resources by providing centralized governance, compliance, and secure collaboration at scale.

Teams consolidate managing tenants, tenant members, and subscriptions in one central place, offering visibility from a higher level perspective instead of the tenant by the tenant. Auth0 Teams is designed to improve the work efficiency and experience of dashboard admins responsible
for managing the Auth0 resources.

[Learn more of Auth0 Teams in our docs!](https://auth0.com/docs/get-started/auth0-teams)

## 👩‍💻 JWT Access Token Profiles

JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens - [RFC 9068](https://datatracker.ietf.org/doc/rfc9068/) is now available. RFC 9068 provides a standard JWT format to represent Access Tokens. The main goal here is to provide interoperability to issue and consume Access Tokens between authorization servers and resource/API servers of different vendors and reduce friction to use Auth0 when onboarding from other solutions. [Read more about it in the docs.](https://auth0.com/docs/secure/tokens/access-tokens/access-token-profiles)

Our Auth0 profile for JWT Access Tokens will remain the default option, as we need and want to maintain backward compatibility. However, customers can now opt-in to use the new profile for Access Tokens on a per-API basis. This standard was authored by [Vittorio Bertocci](https://auth0.com/blog/in-celebration-of-vittorio-bertocci/). 

## Summary 

This blog post was already a summary of everything announced during Developer Day 2024, so go back and check the section names! 😜

If you missed Developer Day and watch to [catch the recording, you can do so by clicking here.](https://developerday.com/) 


DevDay 2024 Recap: What's New In Auth0?

ana-cidre

Ana Cidre is a passionate advocate for the developer community and leads the Developer Advocacy team at Auth0. She's committed to fostering a more inclusive and diverse tech world, drawing on her technical background and strategic vision to improve developer experiences and build meaningful connections.

<br>

As the founder of GalsTech, an initiative supporting women in tech in Galicia, and through her active efforts to create welcoming spaces for underrepresented groups, Ana's dedication to diversity and inclusion extends beyond her daily work.

<br>

Ana has a proven track record of building global Developer Relations teams, cultivating active developer communities, and crafting impactful educational content. She maintains a strong connection to the community through speaking engagements and direct interaction with developers.

Sr Manager, Developer Advocacy

Ana Cidre

Take a sneak peek at DevDay. We have created 24 hours of content for you to level up your identity skills through talks, panel discussions, labs and much more!

[**dev_day(24)**](https://a0.to/joindevday24), which is happening on September 24th, is just around the corner, and we couldn't be more excited. There is so much fantastic content in store, and when we say so much, we mean 24 hours of content! That's the equivalent of 35+ sessions, multiple fun activities, and six hands-on labs... The best part? It's free!

As a developer, I know that it can be a challenge to skill up and keep up with new technologies. Not everyone loves building, managing, and securing login pages or knows what CIAM stands for. But it turns out that the login box can be the start of many things that will help your application get off the ground. It's also one of the first tasks your user will have to complete before enjoying your app. And that's just the tip of the iceberg! You might also need to think about bot detection, user management, progressive profiling, MFA, and so much more. All while delivering a user experience that doesn't suck.

Here is where Auth0 by Okta can help. With [**dev_day(24)**](https://a0.to/joindevday24), I genuinely believe that you will learn something new, stay up to date with identity trends, make informed decisions on improving your user experience, and hopefully have some fun!

> If you're thinking, who will watch 24 hours of content in one sitting? You're not alone… we all need to eat, sleep, and have a life. But don't worry, we have got you covered! 

Throughout your day, you can pick the most exciting sessions, and if there are sessions at an inconvenient time, all of the content is available on demand. Pro tip: the labs are modular, meaning you don't have to complete the previous one to complete the one you are about to watch. However, the benefit of attending the live sessions means that you get to ask questions to our team of Auth0 experts via chat.

Would you like a sneak peek of what we have planned for the day?

## Keynote

**![](https://images.ctfassets.net/23aumh6u8s0i/5YiqyV75NiTBiQRXkcTuU4/900537450e4e99d34c1a75823fe10965/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)**

The keynote outlines how Okta stands with developers, particularly in an evolving world powered by AI.

*   You'll learn how we're making authentication and authorization increasingly secure.
*   How we are more flexible and adaptable to developers' needs.
*   You'll see how Okta protects your applications from old threats and new AI-based threats.

In short, if you're a forward-thinking developer who cares about securing your applications in the time of AI, you can't miss this session.

## Hands-on Labs

**![](https://images.ctfassets.net/23aumh6u8s0i/6wyqQycadBWF9IVih4vXQ/7552f88aa9714c57a64c3c8f59bb16c9/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)**

The event's labs are built around a fictional educational web platform called "_Learn Identity_." But Learn Identity needs your help! The application is not secure; anyone can access and edit any content. With these guided hands-on labs, you will help us secure and improve the application.

These labs are modular, so you can choose which ones you want to complete without completing the others beforehand. You can always come back and complete them after the day, as they are available to you anytime.

## Highlighted Sessions

Whether building a Saas application or creating your side project, we have the identity solution for you. Learn how to leverage Auth0 beyond the login box to make your customer experience seamless. It's hard to highlight just a few of the 35+ sessions, but here is our list of five sessions you don’t want to miss:

![](https://images.ctfassets.net/23aumh6u8s0i/5Vu8HpWAIoGtsrzDSCluVK/b9aa65ed3cfafe5b3570e073130534dd/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)

[**Crafting delightful experiences with Advanced Customizations for Universal Login**](https://a0.to/devday24/advanced-universal-login)

Starting with our updated login box, learn how to create delightful user experiences with the new Advanced Customizations for Universal Login.

![](https://images.ctfassets.net/23aumh6u8s0i/a40yEhIOc3jEs7jPgKXiZ/54a15b114cdbe2161eec04b49f6a45f4/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)

[**Auth0 Forms and the future of extensibility in Customer Identity**](https://a0.to/devday24/auth0-forms)

The times of extending login or signup flows with additional steps that required developers to redirect users to externally hosted pages are part of the past. Meet Auth0 Forms, a new visual editor that allows you to create forms directly within your domain.

![](https://images.ctfassets.net/23aumh6u8s0i/QO2PF8etdCKsLeXHEYmgY/b763d2185a00402ba95a63ea87a4b30b/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)

[**Paradigm shift, moving beyond roles and permissions to a fine-grained access control**](https://a0.to/devday24/paradigm-shift)

Moving from authentication to authorization, you'll learn about moving toward a more fine-grained access control as we look into some of the most widely used authorization strategies, such as Role-based, Attribute-based, and Relationship-based access control.

![](https://images.ctfassets.net/23aumh6u8s0i/5p8YCkoH65a4cSUtNL7gKZ/87dffef8e8a98a43a7e003766db4ef1c/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)

[**Security Considerations in the Time of AI Engineering**](https://a0.to/devday24/ai-security)

This session digs into the keynote topics around AI + Identity, digging even deeper into the security considerations we should take in these times. By evaluating productivity vs. risk and risk prevention strategies, you can make an informed decision on what tools are best for you to use vs. which ones aren't.

![](https://images.ctfassets.net/23aumh6u8s0i/6h635xv5qgvctHfVieVfzt/7c434f1a49170cecc94db60672b7f1ba/Uploaded_from_Developer_Day_2024__A_Sneak_Peek)

[**Building B2B SaaS applications using Auth0**](https://a0.to/devday24/build-b2b-saas)

This session will showcase how to implement Auth0 in your B2B SaaS application using best practices. We'll get hands-on and showcase the power of Actions, Organizations, and the Marketplace so that you can see the wide range of tools at your disposal.

## Swag!

Would a developer event be a developer event without swag? Of course not! Throughout that day, we will have several fun interactive experiences with limited edition Auth0 by Okta swag on the line. Games like our Easter Egg Challenge will unlock different pieces of swag.

We also have a trivia after our talks in which we will ask questions about the previous sessions. Get the questions right and be the quickest to win!

I hope you’re just as excited as we are about **dev_day(24)**. Don’t forget to register [here](https://a0.to/joindevday24) and save the date on your calendars. We’re looking forward to seeing you on September 24th at a time that suits you best!

Developer Day 2024: A Sneak Peek

andrea-chiarelli

I have over 20 years of experience as a software engineer and technical author. Throughout my career, I've used several programming languages and technologies for the projects I was involved in, ranging from C# to JavaScript, ASP.NET to Node.js, Angular to React, SOAP to REST APIs, etc.

In the last few years, I've been focusing on simplifying the developer experience with Identity and related topics, especially in the .NET ecosystem.

Principal Developer Advocate

Andrea Chiarelli

Come and learn what you can do as a developer to keep your app users' identities safe.

**Developer Day** is back! Okta's event for developers will take you into the world of Identity to repeat last year's success.

This year's event will be **virtual** and take place over two days, **May 16th and 17th**, with two themes: "**Take Control of Identity**" and "**Enterprise Readiness**". Come and learn how to put your users in control of their identities and provide a great user experience with your applications. You will learn how the Identity space is evolving and what technologies and best practices are available to grant security for your user identities.

<AmpContent>
<amp-youtube
    data-videoid="V3MBZEmD5zw"
    layout="responsive"
    width="480" height="270">
</amp-youtube>
</AmpContent>

<NonAmpContent>
<div
  class='embed-container'
  style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden; max-width: 100%;margin-bottom:40px;">
    <iframe
      style="position: absolute; top: 0; left: 0; width: 100%; height: 100%;"
      src='https://www.youtube.com/embed/V3MBZEmD5zw'
      frameborder='0' allowfullscreen>
    </iframe>
</div>
</NonAmpContent>

The event is **free**. Designed  **by developers for developers**, it will feature inspiring keynotes and hands-on sessions from industry leaders. You'll meet Okta team members who will answer your questions and guide you through online workshops.

Each of the two days will focus on one of Okta's offerings. On **May 16th**, the focus will be on **Customer Identity Cloud (Auth0)** and the "Take Control of Identity" theme. On **May 17th** the focus will be on **Workforce Identity Cloud** and the "Enterprise Readiness" theme. The event will be live-streamed from the Okta New York City Experience Center and the Okta San Francisco Headquarters.

![Developer day 2023](https://images.ctfassets.net/23aumh6u8s0i/27maf1AqRqeGjVY5rL4swF/f37146eaf7e8c906838706531a3907b0/developer-day-2023.png)

Just because it's virtual doesn't mean you can't connect with other developers and Okta people. You can enjoy your Developer Day in four cities around the world: **Toronto**, **London**, **Frankfurt**, and **Sydney**. Join your local community and celebrate your Developer Day!

[Register](https://developerday.com/register/?utm_source=auth0_blog&utm_medium=sc&utm_campaign=blog_announcement) today to make sure you don’t miss this opportunity to learn about Identity evolution from experts! And keep an eye on the [Developer Day website](https://developerday.com/?utm_source=auth0_blog&utm_medium=sc&utm_campaign=blog_announcement) for the agenda and more information.


"devday"