Auth0
Welcome to Auth0, an identity platform to manage access to your applications.
What is identity and access management (IAM)?
Identity and access management provides control over user validation and resource access. Commonly known as IAM, this technology ensures that the right people access the right digital resources at the right time and for the right reasons.
In Ahola Digital, we use Auth0 as an authentication-platform for our users. Permissions are handled elsewhere.
Auth0 plan tiers
New plan tiers offered by Auth0. Image taken on 14.10.2024.
These are old B2C plan tiers from 12.03.2024
Auth0 Machine-to-Machine (M2M) tokens
Currently we are on the B2C - Professional plan (5000 M2M tokens per month).
2023 M2M token usage
(This was fixed by Vincit, authentication call usage is now ~10/mo)
| Month | Authentication Calls |
|---|---|
| 2023-10 | 942 |
| 2023-09 | 196 |
| 2023-08 | 112 |
| 2023-07 | 24 |
| 2023-06 | 7 |
| 2023-05 | 0 |
| 2023-04 | 0 |
| 2023-03 | 0 |
| 2023-02 | 0 |
| 2023-01 | 0 |
| 2022-12 | 0 |
| 2022-11 | 0 |
| Day | Tenant | Application | Authentication Calls |
|---|---|---|---|
| 2023-10-25 | attracs@eu | TMS Taksi Helsinki | 13 |
| 2023-10-24 | attracs@eu | TMS Taksi Helsinki | 168 |
| 2023-10-23 | attracs@eu | TMS Taksi Helsinki | 169 |
| 2023-10-22 | attracs@eu | TMS Taksi Helsinki | 9 |
| 2023-10-21 | attracs@eu | TMS Taksi Helsinki | 21 |
| 2023-10-20 | attracs@eu | TMS Taksi Helsinki | 162 |
| 2023-10-19 | attracs@eu | TMS Taksi Helsinki | 174 |
| 2023-10-18 | attracs@eu | TMS Taksi Helsinki | 101 |
Token plan limit
On 2023/10 we nearly reached our monthly M2M token limit. * What happens when you hit the limit? * https://community.auth0.com/t/machine-to-machine-auth-token-quota-monitoring/76500 > What will happen if we run out of the quota? Would it block the connection? > Once you have utilized your allotted quota, you will no longer be able to request new M2M Auth tokens until the monthly quota refreshes. Token requests after this point will be blocked and prevented from generation. * What did we do to avoid hitting the limit? * Increased our plan tier, which also increased our M2M tokens from 1000 ➝ 5000 per month. * Developers are also investigating if we can control the amount of M2M tokens we are using.
Jonne: this M2M is probably the metering data webhook calls by vincit company
they are probably creating a new token for every call
Hannu: ah... they started to send as more of metering data as they added Mitax
Jonne: they are valid for 24h at a time
yes, they have to find a way to cache the auth token
i believe they are doing this from serverless lamda funtions
so this might get tricky...
that is the only M2M use case we hav now
The future
Auth0 doesn't seem to explicitly offer more than 5000 M2M tokens per month for any of their tiers. If we start rapidly ballooning with our M2M token usage we may have to think of another plan besides just increasing our tier.