/pocs
All proofs of concept
Each POC has its own documentation page and, where it makes sense, a live section inside the profile area.
POC-001live
Self-service MFA & passkeys with the My Account API
Let signed-in users enroll, rename and remove passkeys, authenticator apps, security keys, SMS, email and recovery codes from your own profile page, using Auth0's user-scoped /me/v1 API through a Next.js backend-for-frontend.
My Account APIMFAPasskeysWebAuthn
Intermediate · 22 min readOpen →
POC-002planned
Step-up authentication for sensitive actions
Require a fresh MFA challenge before high-risk operations, and enforce it server-side with acr/amr and scopes.
MFAActionsacr_values
POC-003planned
Connected accounts & Token Vault
Link third-party accounts (Google, GitHub…) with the My Account API and call their APIs on the user's behalf.
My Account APIToken Vault