"event_code","event_type","event_description","additional_info"
"admin_update_launch","Auth0 Update Launched","",""
"api_limit","Rate Limit On API","The maximum number of requests to the API in given time has reached.","Rate Limit Policy"
"cls","Code/Link Sent","Passwordless login code/link has been sent","Passwordless"
"coff","Connector Offline","AD/LDAP Connector is offline","Active Directory/LDAP Connector"
"con","Connector Online","AD/LDAP Connector is online and working","Active Directory/LDAP Connector"
"cs","Code Sent","Passwordless login code has been sent","Passwordless"
"depnote","Deprecation Notice","",""
"du","Deleted User","User has been deleted.","User Profile"
"f","Failed Login","",""
"fapi","Failed API Operation","",""
"fc","Failed by Connector","","Active Directory/LDAP Connector"
"fce","Failed Change Email","Failed to change user email","User Profile"
"fco","Failed by CORS","Origin is not in the Allowed Origins list for the specified application","Applications"
"fcoa","Failed cross-origin authentication","",""
"fcp","Failed Change Password","","Changing a User's Password"
"fcph","Failed Post Change Password Hook","",""
"fcpn","Failed Change Phone Number","","User Profile"
"fcpr","Failed Change Password Request","","Changing a User's Password"
"fcpro","Failed Connector Provisioning","Failed to provision a AD/LDAP connector","Active Directory/LDAP Connector"
"fcu","Failed Change Username","Failed to change username","User Profile"
"fd","Failed Delegation","Failed to generate delegation token","Delegation Tokens"
"fdeac","Failed Device Activation","Failed to activate device.",""
"fdeaz","Failed Device Authorization Request","Device authorization request failed.",""
"fdecc","User Canceled Device Confirmation","User did not confirm device.",""
"fdu","Failed User Deletion","","User Profile"
"feacft","Failed Exchange","Failed to exchange authorization code for Access Token","Authorization Code Grant Flow"
"feccft","Failed Exchange","Failed exchange of Access Token for a Client Credentials Grant","Asking for Access Tokens for a Client Credentials Grant"
"fede","Failed Exchange","Failed to exchange Device Code for Access Token",""
"fens","Failed Exchange","Failed exchange for Native Social Login",""
"feoobft","Failed Exchange","Failed exchange of Password and OOB Challenge for Access Token",""
"feotpft","Failed Exchange","Failed exchange of Password and OTP Challenge for Access Token",""
"fepft","Failed Exchange","Failed exchange of Password for Access Token",""
"fepotpft","Failed Exchange","Failed exchange of Passwordless OTP for Access Token",""
"fercft","Failed Exchange","Failed Exchange of Password and MFA Recovery code for Access Token",""
"fertft","Failed Exchange","Failed Exchange of Refresh Token for Access Token",""
"ferrt","Failed Exchange","Failed Exchange of Rotating Refresh Token",""
"fi","Failed invite accept","Failed to accept a user invitation. This could happen if the user accepts an invitation using a different email address than provided in the invitation, or due to a system failure while provisioning the invitation.",""
"flo","Failed Logout","User logout failed","Logout"
"fn","Failed Sending Notification","Failed to send email notification","Emails"
"fp","Failed Login (Incorrect Password)","",""
"fpar","Failed Pushed Authorization Request","",""
"fs","Failed Signup","",""
"fsa","Failed Silent Auth","",""
"fu","Failed Login (Invalid Email/Username)","",""
"fui","Failed users import","Failed to import users","User Import/Export"
"fv","Failed Verification Email","Failed to send verification email","Verification Email"
"fvr","Failed Verification Email Request","Failed to process verification email request","Verification Email"
"gd_auth_failed","OTP Auth failed","One-time password authentication failed.","Multi-factor Authentication"
"gd_auth_rejected","OTP Auth rejected","One-time password authentication rejected.","Multi-factor Authentication"
"gd_auth_succeed","OTP Auth success","One-time password authentication success.","Multi-factor Authentication"
"gd_enrollment_complete","Guardian enrollment complete","A first time MFA user has successfully enrolled using one of the factors",""
"gd_module_switch","Module switch","",""
"gd_otp_rate_limit_exceed","Too many failures","A user, during enrollment or authentication, enters an incorrect code more than the maximum allowed number of times. Ex: A user enrolling in SMS enters the 6-digit code wrong more than 10 times in a row.",""
"gd_recovery_failed","Recovery failed","A user enters a wrong recovery code when attempting to authenticate.","Multi-factor Authentication"
"gd_recovery_rate_limit_exceed","Too many failures","A user enters a wrong recovery code too many times.","Multi-factor Authentication"
"gd_recovery_succeed","Recovery success","A user successfully authenticates with a recovery code.","Multi-factor Authentication"
"gd_send_mail","Email Sent","Email for MFA successfully sent.",""
"gd_send_pn","Push notification sent","Push notification for MFA sent successfully sent.","MFA with Push Notifications"
"gd_send_pn_failure","Push notification sent","Push notification for MFA failed.",""
"gd_send_sms","SMS Sent","SMS for MFA sent successfully sent.","Using SMS for MFA"
"gd_send_sms_failure","SMS sent failures","Attempt to send SMS for MFA failed.",""
"gd_send_voice","Voice call made","Voice call for MFA successfully made.",""
"gd_send_voice_failure","Voice call failure","Attempt to make Voice call for MFA failed.",""
"gd_start_auth","Second factor started","Second factor authentication event started for MFA.","Multi-factor Authentication"
"gd_start_enroll","Enroll started","Multi-factor authentication enroll has started.","Multi-factor Authentication"
"gd_start_enroll_failed","Enrollment failed","Push to start enrollement failed.",""
"gd_tenant_update","Guardian tenant update","","Hosted MFA Page"
"gd_unenroll","Unenroll device account","Device used for second factor authentication has been unenrolled.","Multi-factor Authentication"
"gd_update_device_account","Update device account","Device used for second factor authentication has been updated.","Multi-factor Authentication"
"gd_user_delete","User delete","Deleted multi-factor user account.","User Profile"
"gd_webauthn_challenge_failed","Enrollment challenge issued","User failed to verify Webauthn factor.",""
"gd_webauthn_enrollment_failed","Enroll failed","WebAuthn factor enrollment failed.",""
"limit_delegation","Too Many Calls to /delegation","Rate limit exceeded to /delegation endpoint","API Rate Limit Policy"
"limit_mu","Blocked IP Address","An IP address is blocked with 100 failed login attempts using different usernames all with incorrect passwords in 24 hours or 50 sign-up attempts per minute from the same IP address.","Anomaly Detection"
"limit_ui","Too Many Calls to /userinfo","Rate limit exceeded to /limit_ui endpoint","API Rate Limit Policy"
"limit_wc","Blocked Account","An IP address is blocked with 10 failed login attempts into a single account from the same IP address.","Anomaly Detection"
"limit_sul","Blocked Account","A user is temporarily prevented from logging in because they reached the maximum logins per time period from the same IP address. For more information, see Attack Protection.",""
"mfar","MFA Required","A user has been prompted for multi-factor authentication (MFA). When using Adaptive MFA, Auth0 includes details about the risk assessment.",""
"mgmt_api_read","Management API read Operation","API GET operation returning secrets completed successfully",""
"oidc_backchannel_logout_failed","Failed OIDC Back-Channel Logout request","Failed OIDC Back-Channel Logout request",""
"oidc_backchannel_logout_succeeded","Successful OIDC Back-Channel Logout request","Successful OIDC Back-Channel Logout request",""
"pla","Pre-login risk assessment","Bot Detection risk assessment",""
"pwd_leak","Breached password","Someone behind the IP address: ip attempted to login with a leaked password.","Anomaly Detection"
"resource_cleanup","Refresh token excess warning","Emitted when resources exceeding defined limits were removed.",""
"s","Success Login","Successful login event.",""
"sapi","Success API Operation","",""
"sce","Success Change Email","","Emails in Auth0"
"scoa","Success cross-origin authentication","",""
"scp","Success Change Password","",""
"scph","Success Post Change Password Hook","",""
"scpn","Success Change Phone Number","",""
"scpr","Success Change Password Request","",""
"scu","Success Change Username","",""
"sd","Success Delegation","","Delegation Tokens"
"sdu","Success User Deletion","User successfully deleted","User Profile"
"seacft","Success Exchange","Successful exchange of authorization code for Access Token","Authorization Code Grant Flow"
"seccft","Success Exchange","Successful exchange of Access Token for a Client Credentials Grant","Asking for Access Tokens for a Client Credentials Grant"
"sede","Success Exchange","Successful exchange of device code for Access Token",""
"sens","Success Exchange","Native Social Login",""
"seoobft","Success Exchange","Successful exchange of Password and OOB Challenge for Access Token",""
"seotpft","Success Exchange","Successful exchange of Password and OTP Challenge for Access Token",""
"sepft","Success Exchange","Successful exchange of Password for Access Token",""
"sercft","Success Exchange","Successful exchange of Password and MFA Recovery code for Access Token",""
"sertft","Success Exchange","Successful exchange of Refresh Token for Access Token",""
"si","Successful invite accept","Successfully accepted a user invitation",""
"signup_pwd_leak","Breached password","Someone behind the IP address ip attempted to signup with a leaked password.",""
"srrt","Success Revocation","Successfully revoked a Refresh Token",""
"slo","Success Logout","User successfully logged out","Logout"
"ss","Success Signup","",""
"ssa","Success Silent Auth","",""
"sui","Success users import","Successfully imported users","User Import/Export"
"sv","Success Verification Email","Successfully consumed email verification link",""
"svr","Success Verification Email Request","Successfully called verification email endpoint. Verification email in queue to send.",""
"sys_os_update_end","Auth0 OS Update Ended","",""
"sys_os_update_start","Auth0 OS Update Started","",""
"sys_update_end","Auth0 Update Ended","",""
"sys_update_start","Auth0 Update Started","",""
"ublkdu","User login block released","User block setup by anomaly detection has been released",""
"w","Warnings During Login","Filters for logs of type warning during login",""