Authentication for users of AI agents
With Auth0, your users can securely log in with:- Username and password
- Passwordless and Passkeys
- Social and Enterprise login
- Corporate credentials and Single Sign On (SSO) for B2B AI applications


Auth0 Authentication Flow
Authentication for AI agents and API access
With Auth0, it is possible to extend authentication to AI agents accessing services on their own:- Machine-to-Machine authentication: For AI agents or backend services, use the Client Credentials Flow, mutual TLS (mTLS), or Private Key JWT to authenticate directly with APIs.
- Delegated authorization: When an AI agent acts on the user’s behalf, use the On-Behalf-Of Token Exchange to call your own APIs or various token exchanges with Token Vault to call others’ APIs on the user’s behalf.
User login flows for AI agents
Auth0 offers two login flows:- Universal Login (Recommended): Users are redirected to a secure, Auth0-hosted login page. Your application never handles credentials directly, and MFA, password policies, and identity provider connections are supported out-of-the-box. Supports fully custom, client-rendered login screens.

Auth0 Universal Login Screen
- Embedded Login: The login UI is integrated directly into your application, giving you full branding control. Requires your team to handle credential inputs and secure communication, and is more complex to maintain. Best suited for specialized internal tools in tightly controlled environments.