Auth0
Incident Management is now generally available! Incident Management is now generally available!

Auth0

Agent Check Agent Check

Supported OS: Linux Mac OS Windows

Overview

Auth0 is an identity platform for development teams which provides developers and enterprises with the building blocks they need to secure their applications.

This integration leverages Auth0’s Log Streaming to send logs directly to Datadog. The logs are sent in real time as they are generated in Auth0, giving customers up-to-date information about their Auth0 tenant. One of the key benefits of using using this integration is the ability to collect and visualize data in order to identify trends. Engineering teams use it to visualize error rates and traffic data. Security teams use it to visualize authorization traffic and set up alerts for high-risk actions.

Key use cases for the integration

Identity data provides crucial insight into who performed what activity. This allows teams to better understand user behaviour across their system.

Make Informed Decisions About System Architecture and Development

By tracking identity trends over time, teams can make informed decisions about product development and system architecture. As an example teams might prioritze development based on tracking peak login times, authentication activity and geographical activity.

Quickly respond to performance and security incidents

Identity information can be used to quickly identify security and performance incidents. For instance, massive spikes in unsuccessful login attempts could indicate an ongoing credential stuffing attack, one of the most common threats targeting identity systems.

By configuring thresholds, security teams can set up alerts to notify them when suspicious events take place, allowing them to more quickly respond to security incidents.

Setup

All configuration happens on the Auth0 Dashboard.

  1. Log in to the Auth0 Dashboard.

  2. Navigate to Logs > Streams.

  3. Click + Create Stream.

  4. Select Datadog and enter a unique name for your new Datadog Event Stream.

  5. On the next screen, provide the following settings for your Datadog Event Stream:

    SettingDescription
    API KeyEnter your Datadog API key.
    RegionIf you are in the Datadog EU site (app.datadoghq.eu), the Region should be EU, otherwise it should be GLOBAL
  6. Click Save.

When Auth0 writes the next tenant log, you’ll receive a copy of that log event in Datadog with the source and service set to auth0.

Validation

View logs in Datadog:

  1. Navigate to Logs > Livetail.
  2. See Auth0 logs by setting source:auth0.

Data Collected

Logs

Auth0 logs are collected and sent to Datadog. The types of logs that could be returned are outlined here.

Metrics

auth0 does not include any metrics.

Service Checks

auth0 does not include any service checks.

Events

auth0 does not include any events.

Troubleshooting

Need help? Contact Datadog support. Read more about this integration in our blog post.