Auth0 Guardian

What Auth0 Guardian is

Auth0 Guardian is a mobile app for completing multi-factor authentication on iOS and Android. Users can approve a login push notification on an enrolled device or generate a temporary one-time password, which is valid for 30 seconds by default. The app supports multiple languages and dialects, defaults to the device language, and offers system, light, and dark themes. Passcodes, passphrases, and device biometrics can protect the app. Organizations can use Guardian SDKs to build similar apps or add Guardian capabilities to their own applications. Push notifications can use AWS SNS, Firebase Cloud Messaging, or Apple Push Notification service. Auth0 MFA API endpoints can enforce MFA at token endpoints and enroll or manage factors. Custom apps built with Guardian SDKs cannot approve web login attempts when push notifications are disabled, and they do not show login attempt details in a native-device dialog. Auth0 describes the Guardian provider setting as a legacy option and recommends the any provider setting in most cases. Auth0's pricing lists Pro Multi-Factor Authentication in the Essentials plan at $35 a month for up to 500 monthly active users; a free plan and 22-day trial are also listed. Guardian is available through the Apple App Store and Google Play Store.

Who it suits

Guardian suits people completing MFA on an iOS or Android device, and organizations that want to build Guardian capabilities into their own apps. The SDK constraints and Auth0's legacy-provider guidance matter to teams planning custom integrations.

Limits

Auth0 lists the Essentials plan at $35 a month with Pro Multi-Factor Authentication for up to 500 monthly active users. The stated custom-app SDK limitations apply when push notifications are disabled and to displaying login attempt details.

Getting started

1. Open the Auth0 Guardian page.
2. Download the app from the Apple App Store or Google Play Store.
3. Use an enrolled device to approve a login push notification or generate a temporary OTP.
4. Organizations can use Guardian SDKs or Auth0 MFA API endpoints to add or manage MFA capabilities.

Verdict

Guardian offers push approval and temporary OTPs, alongside options for app protection and localization. Organizations considering SDK-based custom apps should account for its push-related limits and Auth0's guidance on the legacy provider setting.