Use this file to discover all available pages before exploring further.
The event object for the post-user-registration Actions trigger provides contextual information about the newly-created user.
Property
Description
event.connection
Details about the Connection that was used to register the user.
Includes the following properties:
idString.
The connection’s unique identifier.
metadataOptional dictionary.
Metadata associated with the connection.
nameString.
The name of the connection used to authenticate the user (for example, twitter or some-g-suite-domain).
strategyString.
The type of connection. For social connections, event.connection.strategy === event.connection.name. For enterprise connections, the strategy is waad (Windows Azure AD), ad (Active Directory/LDAP), auth0 (database connections), and so on.
event.request
(Optional)
Details about the request that initiated the transaction.
Includes the following properties:
geoipObject. Contains geographical information about the request.
Includes the following properties:
cityNameOptional string.
continentCodeOptional string.
countryCodeOptional string.
countryCode3Optional string.
countryNameOptional string.
latitudeOptional number.
longitudeOptional number.
subdivisionCodeOptional string.
subdivisionNameOptional string.
timeZoneOptional string.
hostnameOptional string.
The hostname that is being used for the authentication
flow.
ipString.
The originating IP address of the request.
languageOptional string.
The language requested by the browser.
methodString.
The HTTP method used for the request
user_agentOptional string.
The value of the User-Agent header received when initiating the transaction.
event.security_context
(Optional)
An object containing fingerprint signatures. This will be available only when traffic is handled through the Auth0 Edge (default Auth0-managed proxy layer). It may not be available if requests are routed through a customer-managed reverse proxy. The JA3/JA4 fingerprint can be null or empty in some cases. The most common case is for HTTP requests because JA3 and JA4 are calculated in TLS. It can also be empty due to the Worker sending requests within the same zone or to a zone that is not proxied (or a third party).
Includes the following properties:
ja3Optional string. JA3 fingerprint signature. This will be available only if the client is using a TLS connection.
ja4Optional string. JA4 fingerprint signature. This will be available only if the client is using a TLS connection.
event.tenant
Details about the Tenant associated with the current transaction.
Includes the following properties:
idString.
The name of the tenant.
event.transaction
(Optional)
Details about the current transaction.
Includes the following properties:
acr_valuesArray of strings.
Any acr_values provided in the original authentication
request.
localeString.
The locale to be used for this transaction as determined by comparing the browser’s requested languages to the tenant’s language settings.
login_hintOptional string.
Hint to the authorization server about the login identifier the end-user might use to log in (if necessary).
promptOptional array of strings.
List of instructions indicating whether the user may be prompted for re-authentication and consent.
protocolOptional string. Contains information about the authentication protocol.
Possible values include:
oidc-basic-profileMost used, web-based login.
oidc-implicit-profileUsed on mobile devices and single-page apps.
samlpSAML protocol used on SaaS apps.
wsfedWS-Federation used on Microsoft products like Office365.
wstrust-usernamemixedWS-trust User/password login used on CRM and Office365.
oauth2-webauthnSignup via Native Passkeys API.
oauth2-device-codeTransaction using the Device .
oauth2-resource-ownerUser/password login typically used on database connections.
oauth2-resource-owner-jwt-bearerLogin using a bearer JWT signed with user’s private key.
oauth2-passwordLogin using the password exchange.
oauth2-access-tokenRefreshing a token using the refresh token exchange.
oauth2-refresh-tokenRefreshing a token using the refresh token exchange.
oauth2-token-exchange
oidc-basic-profileMost used, web-based login.
redirect_uriOptional string.
The URL to which Auth0 will redirect the browser after the transaction is completed.
requested_scopesArray of strings.
The scopes requested (if any) when starting this authentication flow.
response_modeOptional string.
Informs the authorizationsServer of the mechanism to be used for returning parameters from the authorization endpoint.
Possible values include:
query
fragment
form_post
web_message
response_typeOptional array of strings.
Possible values include:
code
token
id_token
stateOptional string.
An opaque arbitrary alphanumeric string your app adds to the initial request that Auth0 includes when redirecting back to your application.
ui_localesArray of strings.
The ui_locales provided in the original authentication request.
event.user
An object describing the user on whose behalf the current transaction was initiated.
Includes the following properties:
app_metadataDictionary.
Custom fields that store info about a user that influences the user’s access, such as support plan, security roles, or access control groups.
created_atString.
Timestamp indicating when the user profile was first created.
email_verifiedBoolean.
Indicates whether the user has verified their email address.
family_nameOptional string.
User’s family name.
given_nameOptional string.
User’s given name.
last_password_resetOptional string.
Timestamp indicating the last time the user’s password was reset/changed. At user creation, this field does not exist. This property is only available for Database connections.
nameOptional string.
User’s full name.
nicknameOptional string.
User’s nickname.
phone_numberOptional string.
User’s phone number.
phone_verifiedOptional boolean.
Indicates whether the user has verified their phone number.
updated_atString.
Timestamp indicating when the user’s profile was last updated/modified.
user_idString.
(unique) User’s unique identifier.
user_metadataDictionary.
Custom fields that store info about a user that does not impact what they can or cannot access, such as work address, home address, or user preferences.