> ## Documentation Index
> Fetch the complete documentation index at: https://docs-staging-quickstart-revamp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Learn about the password reset post-challenge Action trigger's event object.

# Actions Triggers: post-challenge - Event Object

The `event` object for the `post-challenge` Actions trigger provides contextual information for a user resetting their password when logging in with Auth0.

**Note:** The `event.user` object does not include any top-level attributes added by an external <Tooltip tip="Identity Provider (IdP): Service that stores and manages digital identities." cta="View Glossary" href="/docs/glossary?term=identity+provider">identity provider</Tooltip>.

<table class="table">
  <thead>
    <tr>
      <th>Property</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>
        <p><code>event.authentication</code></p>
      </td>

      <td>
        <p>
          Details about authentication obtained during the password reset flow.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>methods</code> <em>Array of objects</em>.

            <p>
              Contains the authentication methods a user completed during
              their session.
            </p>

            <p>Returns one of the following objects:</p>

            <ul>
              <li>
                <em>Object</em>.
                <p>Includes the following properties:</p>

                <ul>
                  <li>
                    <code>name</code> <em>String</em>.

                    <p>
                      The name of the first factor completed during the session. Possible values
                      include:
                    </p>

                    <ul>
                      <li>
                        <code>federated</code> A social or enterprise
                        connection was used to authenticate the user as the
                        first factor.
                      </li>

                      <li>
                        <code>pwd</code> A database connection was used to
                        authenticate the user as the first factor.
                      </li>

                      <li>
                        <code>sms</code> A Passwordless SMS connection was
                        used to authenticate the user as the first factor.
                      </li>

                      <li>
                        <code>email</code> A Passwordless Email connection was
                        used to authenticate the user as the first factor or
                        verify email for password reset.
                      </li>

                      <li><code>mock</code> Used for internal testing.</li>

                      <li>
                        <code>string</code> A custom authentication method
                        denoted by a URL (as second or later factor).
                      </li>
                    </ul>
                  </li>

                  <li><code>timestamp</code> <em>String</em>.</li>
                </ul>
              </li>

              <li>
                <em>Object</em>.
                <p>Includes the following properties:</p>

                <ul>
                  <li>
                    <code>name</code> <em>The value <code>mfa</code></em>.
                    <span>The user completed multi-factor authentication (second or
                    later factors).</span>
                  </li>

                  <li><code>timestamp</code> <em>String</em>.</li>

                  <li>
                    <code>type</code> <em>Optional string</em>.

                    <p>
                      The type of the second (or later) factor that was used for multi-factor authentication (MFA), if available. Possible values include:
                    </p>

                    <ul>
                      <li><code>email</code> MFA with email factor.</li>
                      <li><code>otp</code> MFA with OTP factor.</li>

                      <li>
                        <code>push-notification</code> MFA with push
                        notification factor.
                      </li>

                      <li>
                        <code>recovery-code</code> MFA with recovery code
                        factor.
                      </li>

                      <li>
                        <code>phone</code> MFA with SMS or voice factor.
                      </li>

                      <li>
                        <code>webauthn-roaming</code> MFA with WebAuthn
                        factor.
                      </li>

                      <li>
                        <code>webauthn-platform</code> MFA with WebAuthn
                        factor.
                      </li>
                    </ul>
                  </li>
                </ul>
              </li>
            </ul>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.authorization</code></p>
      </td>

      <td>
        <p>
          An object containing information that describes the authorization granted to the user logging in.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>roles</code> <em>Array of strings</em>.
            <span>An array containing the names of the user's assigned roles.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.client</code></p>
      </td>

      <td>
        <p>
          Information about the Client with which the password reset
          transaction was initiated.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>client\_id</code> <em>String</em>.
            <span>The client id of the application the user is logging in to.</span>
          </li>

          <li>
            <code>metadata</code> <em>Dictionary</em>.
            <span>An object for holding other application properties.</span>
          </li>

          <li>
            <code>name</code> <em>String</em>.
            <span>The name of the application (as defined in the Dashboard).</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.connection</code></p>
      </td>

      <td>
        <p>
          Details about the connection used to authenticate the user.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>id</code> <em>String</em>.
            <span>The connection's unique identifier.</span>
          </li>

          <li>
            <code>metadata</code> <em>Optional dictionary</em>.
            <span>Metadata associated with the connection.</span>
          </li>

          <li>
            <code>name</code> <em>String</em>.
            <span>The name of the connection used to authenticate the user (such as
            <code>twitter</code> or <code>example-g-suite-domain</code>).</span>
          </li>

          <li><code>strategy</code> <em>String</em>.<span>The type of connection.<ul><li>For social connections, <code>event.connection.strategy === event.connection.name</code>.</li><li> For enterprise connections, the strategy is<code>waad</code> (Windows Azure AD), <code>ad</code> (Active Directory/LDAP),<code>auth0</code> (database connections), and soon.</li></ul></span></li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.organization</code></p>
        <p><em>(Optional)</em></p>
      </td>

      <td>
        <p>
          Details about the Organization associated with the current
          transaction.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>display\_name</code> <em>String</em>.
            <span>The friendly name of the Organization.</span>
          </li>

          <li>
            <code>id</code> <em>String</em>.
            <span>The Organization identifier.</span>
          </li>

          <li>
            <code>metadata</code> <em>Dictionary</em>.
            <span>Metadata associated with the Organization.</span>
          </li>

          <li>
            <code>name</code> <em>String</em>.
            <span>The name of the Organization.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.request</code></p>
      </td>

      <td>
        <p>Details about the request that initiated the transaction.</p>
        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>body</code> <em>Dictionary</em>.
            <span>The body of the POST request. This data is only available
            during refresh token and Client Credential Exchange flows.</span>
          </li>

          <li>
            <code>geoip</code> <em>Object</em>.
            <p>Includes the following properties:</p>

            <ul>
              <li><code>cityName</code> <em>Optional string</em>.</li>
              <li><code>continentCode</code> <em>Optional string</em>.</li>
              <li><code>countryCode</code> <em>Optional string</em>.</li>
              <li><code>countryCode3</code> <em>Optional string</em>.</li>
              <li><code>countryName</code> <em>Optional string</em>.</li>
              <li><code>latitude</code> <em>Optional number</em>.</li>
              <li><code>longitude</code> <em>Optional number</em>.</li>
              <li><code>subdivisionCode</code> <em>Optional string</em>.</li>
              <li><code>subdivisionName</code> <em>Optional string</em>.</li>
              <li><code>timeZone</code> <em>Optional string</em>.</li>
            </ul>
          </li>

          <li>
            <code>hostname</code> <em>Optional string</em>.
            <span>The hostname used for the authentication
            flow.</span>
          </li>

          <li>
            <code>ip</code> <em>String</em>.
            <span>The originating IP address of the request.</span>
          </li>

          <li>
            <code>language</code> <em>Optional string</em>.
            <span>The language requested by the browser.</span>
          </li>

          <li>
            <code>method</code> <em>String</em>.
            <span>The HTTP method used for the request.</span>
          </li>

          <li>
            <code>query</code> <em>Dictionary</em>.
            <span>The query string parameters sent to the authorization
            request.</span>
          </li>

          <li>
            <code>user\_agent</code> <em>Optional string</em>.
            <span>The value of the <code>User-Agent</code> header received when
            initiating the transaction.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.stats</code></p>
      </td>

      <td>
        <p>Login statistics for the current user.</p>
        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>logins\_count</code> <em>Number</em>.
            <span>The number of times the user has logged in.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.tenant</code></p>
      </td>

      <td>
        <p>Details about the tenant associated with the current transaction.</p>
        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>id</code> <em>String</em>.
            <span>The name of the tenant.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.transaction</code></p>
      </td>

      <td>
        <p>Details about the current transaction.</p>
        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>locale</code> <em>String</em>.
            <span>The locale to use for this transaction as determined by
            comparing the browser's requested languages to the tenant's
            language settings.</span>
          </li>

          <li>
            <code>login\_hint</code> <em>Optional string</em>.
            <span>Hint to the <Tooltip tip="Centralized server that contributes to defining the boundaries of a user’s access. For example, your authorization server can control the data, tasks, and features available to a user." cta="View Glossary" href="/docs/glossary?term=Authorization+Server">Authorization Server</Tooltip> about the login identifier the end-user might use when logging in, if necessary.</span>
          </li>

          <li>
            <code>state</code> <em>Optional string</em>.
            <span>An opaque, arbitrary alphanumeric string your app adds to the initial request that Auth0 includes when redirecting back to your
            application.</span>
          </li>

          <li>
            <code>ui\_locales</code> <em>Array of strings</em>.
            <span>The ui\_locales provided in the original authentication
            request.</span>
          </li>
        </ul>
      </td>
    </tr>

    <tr>
      <td>
        <p><code>event.user</code></p>
      </td>

      <td>
        <p>
          An object describing the user associated with the current transaction.
        </p>

        <p>Includes the following properties:</p>

        <ul>
          <li>
            <code>app\_metadata</code> <em>Dictionary</em>.
            <span>Custom fields that store info about a user that influences the
            user's access, such as support plan, security roles, or access
            control groups.</span>
          </li>

          <li>
            <code>created\_at</code> <em>String</em>.
            <span>Timestamp indicating when the user profile was first
            created.</span>
          </li>

          <li>
            <code>email</code> <em>Optional string</em>.
            <span>(unique) User's email address.</span>
          </li>

          <li>
            <code>email\_verified</code> <em>Boolean</em>.
            <span>Indicates whether the user has verified their email
            address.</span>
          </li>

          <li>
            <code>enrolledFactors</code> <em>Optional array of objects</em>.

            <p>
              An array of authentication factors that the user has enrolled. An empty array indicates the user has not enrolled any factors. If
              <code>enrolledFactors</code> is undefined, the system could not fetch the information, and the user may or may not have enrolled any factors.
            </p>

            <p>Includes the following properties:</p>

            <ul>
              <li>
                <code>options</code> <em>Optional object</em>.

                <p>
                  Additional options describing this instance of the enrolled
                  factor.
                </p>
              </li>

              <li>
                <code>type</code> <em>String</em>.
                <span>The type of authentication factor such as
                <code>push-notification</code>, <code>phone</code>,
                <code>email</code>, <code>otp</code>,
                <code>webauthn-roaming</code> and
                <code>webauthn-platform</code>.</span>
              </li>
            </ul>
          </li>

          <li>
            <code>family\_name</code> <em>Optional string</em>.
            <span>User's family name.</span>
          </li>

          <li>
            <code>given\_name</code> <em>Optional string</em>.
            <span>User's given name.</span>
          </li>

          <li>
            <code>identities</code> <em>Array of objects</em>.

            <p>
              Contains info retrieved from the identity provider originially used to authenticate the user. If a user has linked their profile to multiple identity providers, this array also contains those identities. The contents of an identity provider object vary by provider.
            </p>

            <p>Includes the following properties:</p>

            <ul>
              <li>
                <code>connection</code> <em>Optional string</em>.
                <span>Name of the Auth0 connection used to authenticate the
                user.</span>
              </li>

              <li>
                <code>isSocial</code> <em>Optional boolean</em>.
                <span>Indicates whether a social connection was used. </span>
              </li>

              <li>
                <code>profileData</code> <em>Optional dictionary</em>.
                <span>User information associated with the connection. If user profiles have been linked, <code>profileData</code> contains associated user data for secondary accounts.</span>
              </li>

              <li>
                <code>provider</code> <em>Optional string</em>.
                <span>Name of the entity authenticating the user, such as
                Facebook, Google, SAML, or your own provider.</span>
              </li>

              <li>
                <code>user\_id</code> <em>Optional string</em>.
                <span>User's unique identifier for this connection or provider.</span>
              </li>
            </ul>
          </li>

          <li>
            <code>last\_password\_reset</code> <em>Optional string</em>.
            <span>Timestamp indicating the last time the user's password was
            updated. This field does not exist at user creation. This
            property is only available for Database connections.</span>
          </li>

          <li>
            <code>name</code> <em>Optional string</em>.
            <span>User's full name.</span>
          </li>

          <li>
            <code>nickname</code> <em>Optional string</em>.
            <span>User's nickname.</span>
          </li>

          <li>
            <code>phone\_number</code> <em>Optional string</em>.
            <span>User's phone number. Only valid for users with SMS
            connections.</span>
          </li>

          <li>
            <code>phone\_verified</code> <em>Optional boolean</em>.
            <span>Indicates whether the user has verified their phone number. Only valid for users with SMS connections.</span>
          </li>

          <li>
            <code>picture</code> <em>Optional string</em>.
            <span>URL pointing to the
            <a href="/docs/manage-users/user-accounts/change-user-picture">user's profile picture</a>.</span>
          </li>

          <li>
            <code>updated\_at</code> <em>String</em>.
            <span>Timestamp indicating when the user's profile was last
            updated.</span>
          </li>

          <li>
            <code>user\_id</code> <em>String</em>.
            <span>(unique) User's unique identifier.</span>
          </li>

          <li>
            <code>user\_metadata</code> <em>Dictionary</em>.
            <span>Custom fields that store user information that does not impact their level of access, such as work address, home address, or user preferences.</span>
          </li>

          <li>
            <code>username</code> <em>Optional string</em>.
            <span>(unique) User's username.</span>
          </li>
        </ul>
      </td>
    </tr>
  </tbody>
</table>