Okta Certification Study Guides

Refer to this page for the most up-to-date study guide content. The content may have changed since your last visit.

NEW - Frequently Asked Questions (FAQs) ~ProctorU by Meazure Learning

Auth0 Certified Developer Exam Study Guide

Introduction

This exam study guide is designed to help you prepare for the Auth0 Certified Developer Exam. Passing this exam is a requirement to earn the Auth0 Certified Developer Certification. We highly recommend that you thoroughly review each topic and resources listed in the table. If you are not familiar with a topic, research that topic in the Auth0 Docs.

Important Note:
This exam is proctored and closed-book. No reference materials or electronic devices are permitted during the examination.

What does it mean to be an Auth0 Certified Developer?

Auth0 Certified Developers are proficient in building secure, user-friendly authentication and authorization flows using Auth0’s platform, APIs, and SDKs. They understand OAuth 2.0 flows (including PKCE and OIDC), implement Single Sign-On (SSO), and manage various identity providers like database, social, and enterprise connections. They can configure Role-Based Access Control (RBAC), custom claims, and secure API access using scopes and permissions. Developers are experienced in extending Auth0 with Rules, Actions, Hooks, and setting up Multi-Factor Authentication (MFA). They integrate Auth0 into SPAs, mobile apps, and backend applications using appropriate SDKs. Additionally, they know how to work with Auth0’s Management and Authentication APIs to automate and secure identity workflows.

Exam Overview

Exam Part

This exam has two parts.

Part I: 40 Multiple-Choice (MC) Questions
Part II: Six Performance-Based, Hands-on Use Cases Learn more about Hands-on items here

Time allotted

Part I: 60 minutes

Part II: 120 minutes

Each part is timed separately. Any time left over from Part I does NOT carry over to Part II.
Come fully prepared to sit through the entire exam. There is no break between parts I and II.

Exam Fee

USD 250 (USD 100 for each subsequent retake)

Preparing for the Auth0 Certified Developer Exam

While taking a training course alone doesn’t guarantee a passing score, we strongly recommend completing the Development: Onboarding (Auth0) and Development: Series I (Auth0) in preparation for this exam. Visit learning.asqula.com to explore these and other Auth0 Learning courses. If you are ever in doubt about approved materials for Okta exam preparation, you can reach out to our team at certification@asqula.com.

Practice Exams

To further help you in your preparation and to improve your skills, we highly encourage you to take the following practice exams. These exams simulate the real certification exam environment and will give you a great opportunity to test your knowledge and skills.

1. Standard Practice Exams
  - Take the official Auth0 Developer Practice Exam to get familiar with the exam format and the types of questions you’re likely to encounter.
2. Premier Practice Exam
  - Take the Auth0 Developer Premier Practice Exam for a more in-depth review of key topics and to strengthen areas where you may need additional focus.

Auth0 Certified Developer Exam subject areas

The following tables list the topics that are covered in Parts I and II of this exam. These topics are grouped into topics areas, and topic areas roll up into domains/exam sections. Use these tables as an outline to guide your study and validate your readiness for the Okta Developer Certification Exam.

Part I

Exam Section	Reference Materials	Related Okta Learning
Planning and Designing an Auth0 Implementation	Section Coverage: 12.5%
Scope business needs for user authentication Design user registration flow Scope type of application needed Design and implement topology Design and understand token usage Design and user migration strategies	Authentication (B2B) Organizations: Assign Members to an Organization Organizations: Invite Organization Members Actions: Pre-User Registration Flow The OAuth 2.0 Spec: 2.1. Client Types Authentication and Authorization Flows Deployment Options Deploy on private or public cloud Multi-Tenant Applications Best Practices Validate Access Tokens Configure Refresh Token Rotation Validate Access Tokens Authorization Code and Access Token Variable Size Information Token Best Practices Technical Strategies for Migrating Users to Auth0 User Migration Your Way	Discover the Differences Among Application Types in Auth0 Define Applications in Auth0 Customize Auth0 Universal Login Customize Auth0 Universal Login Themes and Prompts Get Started with Auth0 Tenants Auth0 Architecture Scenarios
Authentication	Section Coverage: 24%
Login
Configure client application settings Set up single sign-on (SSO) Set up single logout functionality Configure cross-origin authentication Set up authentication profile Understand and Implement Authentication APIs Implement JWT token validation using JWKS	Configure Refresh Token Expiration Single Sign-On Application Settings Protocols Log Users Out of Applications Log Users Out of Identity Providers Redirect Users with Alternative Logout Back-Channel Logout Cross-Origin Setup Centralized Universal Login vs. Embedded Login Lock for Web Cross-Origin Authentication Migrate from Embedded Login to Universal Login Configure Identifier First Authentication Configure WebAuthn with Device Biometrics for Passwordless Authentication Configure WebAuthn with Device Biometrics for MFA json web token structure Passwordless Authentication with SMS Tokens Custom Signup Authentication API - Explorer	Discover the Differences Among Application Types in Auth0 Configure and Application in Auth0 Demystify Auth0 Logout Scenarios Understand Global Logout with Auth0 Customize Auth0 Universal Login Lab: Customize Auth0 Universal Login
Provisioning Users
Configure social login providers or identity providers Set up Enterprise Connections Integrate with LDAP or Active Directory Implement appropriate database action scripts	Enterprise-IDP-azure-active-directory-native Identity-providers Connect Your App to SAML Identity Providers Home Realm Discovery Connect Your App to Active Directory using LDAP Map AD/LDAP Profile Attributes to Auth0 User Profile Custom Database Action Script Templates	Authenticate with Auth0 Social and Enterprise Connections Authenticate with Social Connections Authenticate with Enterprise Connections Authenticate with Auth0 Database and Passwordless Connections Source Users from an External Database with Auth0
Managing Users	Section Coverage: 21%
Understand the normalized user profile + user metadata Configure user account linking functionality Implement user process and Progressive profiling Implement organizations and access control/role Design and implement user session management Scope and create user roles Implement session management APIs Implement role-based access control Set up APIs and applying permissions to apps + roles	Metadata Types User Profile Attributes Normalized User Profile Schema User Profile Attributes Account Link Extension Linking Account with Management API User Account Linking Link a User Account Progressive Profiling - blog Progressive Profiling Basics Auth0 Organizations Configure Session Lifetime Settings Technical Strategies for Migrating Users to Auth0 User Migration Your Way Session Management API - Get Session Session Management API - Delete Session Get sessions for user Session Management API Session Management API - Refresh Tokens Role-Based Access Control Register APIs API Scopes Enable Role-Based Access Control for APIs Configure Core Authorization Features for Role-Based Access Control	Manage Auth0 Users Define Users in Auth0 Link Auth0 User Profiles Across Different Connections Extend the Auth0 User Profile Manage B2B Users and Applications with Auth0 Organizations Create and Assign Roles to Auth0 Organization Members Demystify Auth0 Logout Scenarios Understand Application Session Management with Auth0 Protect Your API Endpoints with Auth0 Secure Your API with Auth0 Role-Based Access Control Lab: Protect Your API Endpoints with Auth0 Register and Configure an API with Auth0
Customization	Section Coverage: 22.5%
Branding
Set up Branding Customize email handling, and setup email providers Configure custom domain for authentication Customize Email templates using Liquid Syntax Customize Login pages, Consent prompts, and Error pages	Customize Classic Universal Login Pages Configure Custom External SMTP Email Provider Customize Email Templates Custom Domains User Consent and Third-Party Applications Customize Consent Prompts Customize New Universal Login Page	Customize Auth0 Universal Login Lab: Customize Auth0 Universal Login Customize Auth0 Email Templates Configure a Custom Domain for Auth0 Universal Login Customize Auth0 Universal Login Themes and Prompts Customize Auth0 Error Pages
Actions and Extensions
Implement profile enrichment Implement IP-based access restrictions Invoking third party APIs with actions (identify usecases) Integrate and explain extensions Customize error messages Design and implement user group management Implement extensibility using actions	Progressive profiling Adding email to SMS Passwordless Profile Understand How Metadata Works in User Profiles Actions Sample Use Cases Avoid Common Issues with Resource Owner Password Flow and Attack Protection Explore Flows and Triggers Actions Triggers: post-login - Event Object Actions Ensure Users Log in from Trusted Networks with Auth0 Actions Action Triggers - API Object Understand How Auth0 Actions Work Action Use Cases Auth0 Extensions Customize Error Pages Update tenant settings System for Cross-domain Identity Management (SCIM) Enable Role-Based Access Control for APIs Map SAML Attributes with Auth0 as IdP/SAML Add-on	Manage Auth0 User Extend the Auth0 User Profile Extend Auth0 with Actions Lab: Extend Auth0 with Actions Manage B2B Users and Applications with Auth0 Organizations Manage Auth0 Organization Membership Implement a Custom Auth0 Action
Security	Section Coverage: 12.5%
Implement multi-factor authentication policies Set up attack protection Configure password complexity rules Set up anomaly detection actions Implement CAPTCHA or reCAPTCHA Set up password history and reuse policies Set up passwordless authentication	Multi-Factor Authentication Factors Adaptive MFA Log Events Enable Multi-Factor Authentication Bot Detection Brute-Force Protection Password Options in Auth0 Database Connections Password Strength in Auth0 Database Connections Actions Triggers: post-login - Event Object Multi-Factor Authentication Machine to Machine Flow Password Options in Auth0 Database Connections Password Dictionary Configure Passkey Policy	Secure Auth0 Applications with MFA Configure MFA from the Auth0 Management Dashboard Authenticate with Auth0 Database and Passwordless Connections Configure Password Policies in Database Connections Secure Applications with Auth0 Attack Protection Authenticate with Passwordless Connections
Monitoring Auth0	Section Coverage: 7.5%
Configuring and interpreting logs Evaluate rate limit policy, rate limit burst capability Deploy changes through CLI, Terraform, and management API	Logs View Attack Protection Log Events Adaptive MFA Log Events Retrieve Log Events with Mgmt API - Limitations Auth0 Log Data Retention Auth0 Log Streams Rate Limit Use Cases Deploy CLI Tool Auth0 Management API	Leverage the Auth0 Management API for Testing and Production Use the Auth0 Management API in Production

Part II

Hands-On Task	Reference Materials	Related Okta Learning
Authentication	Section Coverage: 42%
Set up single sign-on (SSO) Implement passwordless authentication Create custom Database Set up Social Connections	Quickstarts Single Sign-On Social Identity Providers Passwordless Authentication with Email	Discover the Differences Among Application Types in Auth0 Lab: Configure Single Page Applications with Auth0 Authenticate with Auth0 Database and Passwordless Connections Lab: Configure Single Page Applications with Auth0 Lab: Customize Auth0 Universal Login Source Users from an External Database with Auth0 Authenticate with Auth0 Social and Enterprise Connections Lab: Authenticate with Auth0 Social and Enterprise Connections
Managing Users	Section Coverage: 40%
Implement bulk user migration, including email and passwords Set up organizations and access control/roles Enrich tokens (custom claims)	Bulk User Imports Create Custom Claims Role-Based Access Control Enable Role-Based Access Control for APIs Create Roles Organizations Overview Create Organizations Add Roles to Organization Members	Migrate Users to Auth0 with Database Connections Authenticate with Auth0 Database and Passwordless Connections Lab: Authenticate with Auth0 Database and Passwordless Connections Manage B2B Users and Applications with Auth0 Organizations Lab: Manage B2B Users and Apps with Auth0 Organizations Protect Your API Endpoints with Auth0 Lab: Protect Your API Endpoints with Auth0
Customization	Section Coverage: 10%
Set up Branding Create custom actions	Customize Universal Login with the No-Code Editor	Customize Auth0 Universal Login Customize Auth0 Universal Login Themes and Prompts Customize Auth0 Error Pages Lab: Customize Auth0 Universal Login Extend Auth0 with Actions Lab: Extend Auth0 with Actions
Security	Section Coverage: 8%
Set up multi-factor authentication	Enable Multi-Factor Authentication	Secure Auth0 Applications with MFA Lab: Secure Auth0 Applications with MFA

Other Resources

The Okta Help Center contains a knowledge library of articles and videos, some of which are pertinent to topics covered on this exam.
The Okta Content Library offers searchable white papers with a rich body of information to explore before your exam.
Join the Okta Community to review questions, discussions, ideas, and blogs for additional exam preparation.

Subject Matter Experts for Auth0 Certified Developer Exam

Okta certification exams are designed and built by subject matter experts who have extensive real world-experiences implementing and administering the Okta service.

Here is the list of subject matter experts who helped design and/or build this exam: