Auth0 Certified Developer Exam Study Guide
Introduction
This exam study guide is designed to help you prepare for the Auth0 Certified Developer Exam. Passing this exam is a requirement to earn the Auth0 Certified Developer Certification. We highly recommend that you thoroughly review each topic and resources listed in the table. If you are not familiar with a topic, research that topic in the Auth0 Docs.
Important Note:
This exam is proctored and closed-book. No reference materials or electronic devices are permitted during the examination.
What does it mean to be an Auth0 Certified Developer?
Auth0 Certified Developers are proficient in building secure, user-friendly authentication and authorization flows using Auth0’s platform, APIs, and SDKs. They understand OAuth 2.0 flows (including PKCE and OIDC), implement Single Sign-On (SSO), and manage various identity providers like database, social, and enterprise connections. They can configure Role-Based Access Control (RBAC), custom claims, and secure API access using scopes and permissions. Developers are experienced in extending Auth0 with Rules, Actions, Hooks, and setting up Multi-Factor Authentication (MFA). They integrate Auth0 into SPAs, mobile apps, and backend applications using appropriate SDKs. Additionally, they know how to work with Auth0’s Management and Authentication APIs to automate and secure identity workflows.
Exam Overview
|
Exam Part |
This exam has two parts.
|
|
Time allotted |
180 minutes
|
|
Exam Fee |
USD 250 (USD 100 for each subsequent retake) |
Preparing for the Auth0 Certified Developer Exam
While taking a training course alone doesn’t guarantee a passing score, we strongly recommend completing the Auth0 Developer Series: Build and Configure and Auth0 Developer Series: Secure and Extend in preparation for this exam. Visit learning.okta.com to explore these and other Auth0 Learning courses. If you are ever in doubt about approved materials for Okta exam preparation, you can reach out to our team at certification@okta.com.
Practice Exams
To further help you in your preparation and to improve your skills, we highly encourage you to take the following practice exams. These exams simulate the real certification exam environment and will give you a great opportunity to test your knowledge and skills.
-
- Standard Practice Exams
- Take the official Auth0 Developer Practice Exam to get familiar with the exam format and the types of questions you’re likely to encounter.
- Premier Practice Exam (Coming Soon)
- Take the Auth0 Developer Premier Practice Exam for a more in-depth review of key topics and to strengthen areas where you may need additional focus.
- Standard Practice Exams
Allowed Applications During the Exam
- Candidates can use the Postman application during the exam.
- Candidates can access https://auth0.com/signup in a web browser.
- Candidates can use a code editor, such as Visual Studio Code, provided they create a fresh project specifically for the exam.
- Candidates can use the Management API Explorer during the exam.
- Candidates can use a terminal or Command Prompt on their system.
- Candidates can access JWT.io in a web browser.
- Candidates can access their email during the exam, either on their phone or laptop.
- Candidates can access Auth0 Documentation during the hands-on portion of the exam.
Restricted Resources
- Candidates are not allowed to access the Auth0 AI Assistant during the exam.
Auth0 Certified Developer Exam subject areas
The following tables list the topics that are covered in Parts I and II of this exam. These topics are grouped into topics areas, and topic areas roll up into domains/exam sections. Use these tables as an outline to guide your study and validate your readiness for the Okta Developer Certification Exam.
Part I
Part II
|
Hands-On Task |
Reference Materials |
Related Auth0 Learning |
Authentication |
Section Coverage: 26% |
|
|
Configure client application settings Set up single sign-on (SSO) Set up authentication profile Implement passwordless authentication Understand and Implement Authentication APIs Configure social login providers or identity providers Set up Enterprise Connections Create custom Database Set up Social Connections Refactor appropriate database action scripts |
Configure Refresh Token Expiration Passwordless Authentication with Email Migrate from Embedded Login to Universal Login Configure Identifier First Authentication Configure WebAuthn with Device Biometrics for Passwordless Authentication |
Discover the Differences Among Application Types in Auth0 Configure and Application in Auth0 Demystify Auth0 Logout Scenarios Discover the Differences Among Application Types in Auth0 Lab: Configure Single Page Applications with Auth0 Authenticate with Auth0 Database and Passwordless Connections Lab: Configure Single Page Applications with Auth0 Source Users from an External Database with Auth0 Authenticate with Auth0 Social and Enterprise Connections Lab: Authenticate with Auth0 Social and Enterprise Connections |
Managing Users |
Section Coverage: 13% |
|
|
Understand the normalized user profile + user metadata Configure user account linking functionality Implement user process and Progressive profiling Implement bulk user migration, including email and passwords Design and implement user session management |
Enable Role-Based Access Control for APIs |
|
Authorization |
Section Coverage: 18% |
|
|
Scope and create user roles Implement role-based access control Enrich tokens (custom claims) Set up APIs and applying permissions to apps + roles Creating Custom API with custom scopes (Securing APIs (M2M)) |
Enable Role-Based Access Control for APIs Configure Core Authorization Features for Role-Based Access Control |
Protect Your API Endpoints with Auth0 Secure Your API with Auth0 Role-Based Access Control Lab: Protect Your API Endpoints with Auth0 |
Customization |
Section Coverage: 23% |
|
|
Set up Branding Customize Login pages, Consent prompts, and Error pages Implement profile enrichment Implement IP-based access restrictions Create custom actions Invoking third party APIs with actions (identify use cases) Customize error messages Implement extensibility using actions Auth0 Forms |
Customize Classic Universal Login Pages Configure Custom External SMTP Email Provider User Consent and Third-Party Applications |
Customize Auth0 Universal Login Lab: Customize Auth0 Universal Login Customize Auth0 Email Templates Configure a Custom Domain for Auth0 Universal Login |
Security |
Section Coverage: 20% |
|
|
Set up multi-factor authentication Implement multi-factor authentication policies Set up attack protection Configure password complexity rules Set up password history and reuse policies Set up passwordless authentication Customize MFA with Auth0 Actions Configure Token lifetime and Sessions |
Multi-Factor Authentication Factors Enable Multi-Factor Authentication Password Options in Auth0 Database Connections Password Strength in Auth0 Database Connections Actions Triggers: post-login - Event Object |
Other Resources
- The Okta Help Center contains a knowledge library of articles and videos, some of which are pertinent to topics covered on this exam.
- The Okta Content Library offers searchable white papers with a rich body of information to explore before your exam.
- Join the Okta Community to review questions, discussions, ideas, and blogs for additional exam preparation.
Subject Matter Experts for Auth0 Certified Developer Exam
Okta certification exams are designed and built by subject matter experts who have extensive real world-experiences implementing and administering the Okta service.
Here is the list of subject matter experts who helped design and/or build this exam:
