Password Rotation

This Action allows you to configure the number of days a password is valid before it expires and the user must rotate it.

This integration allows you to implement a password rotation policy for your users. You may choose to do this to increase your security posture. This Action can be used in tandem with the Password History setting available in your Database connections that can prevent users from rotating their password to values they have previously used. Learn more https://auth0.com/docs/authenticate/database-connections/password-options#password-history.

Prerequisites

1. An Auth0 account and tenant. Sign up for free.

Add the Auth0 Action

Note: Once the Action is successfully deployed, all logins for your tenant will be processed by this integration. Before activating the integration in production, install and verify this Action on a test tenant.

1. Select Add Integration (at the top of this page).

2. Read the necessary access requirements, and select Continue.

3. Configure the integration using the following fields:

• Password Expiry In Days: Set this to the number of days a password is valid before expiry.

• Error Message: Set this to what you wish to return to the calling application. This will be returned in the query string as error_description.

1. Add the integration to your Library by selecting Create.

2. In the modal that appears, select the Add to flow link.

3. Drag the Action into the desired location in the flow.

4. Select Apply Changes.

Results

Once this Action has been deployed. Users with passwords that were set within the window you configured, will login as usual. When users with expired passwords attempt to login, they will be prompted with your error message and be forced to reset their password.

Troubleshooting

Ensure you provide a valid whole number for Password Expiry In Days and remember this will only apply to users that authenticate with Database Connections. Users than authenticate through Social, Enterprise or Passwordless Connections will not be under the scope of this Action.