# Blog Discussions
**URL:** https://community.auth0.com/c/blog-discuss/56.md
[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)
---
## [Authentication and Authorization: What's New in .NET 11](https://community.auth0.com/t/authentication-and-authorization-whats-new-in-net-11/205186)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [November 9, 2026, 1:56pm UTC](https://community.auth0.com/t/authentication-and-authorization-whats-new-in-net-11/205186 "2026-11-09T13:56:35Z")
The release of .NET 11 addresses key edge cases to enhance security and user experience in the identity context. Check out this blog post to learn more.
---
## [Introducing IdentiFlows.dev: A Visual Reference for Identity Flows](https://community.auth0.com/t/introducing-identiflows-dev-a-visual-reference-for-identity-flows/203773)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 29, 2026, 3:01pm UTC](https://community.auth0.com/t/introducing-identiflows-dev-a-visual-reference-for-identity-flows/203773 "2026-09-29T15:01:29Z")
If you are a visual learner or you would like to have authorization and authentication flow diagrams at hand, the identiflow.dev website is for you. Read this blog post to learn more.
---
## [Building Secure AI Agents with Microsoft Agent Framework and Auth0: Human-in-the-Loop Approval](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-human-in-the-loop-approval/203580)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 23, 2026, 8:29am UTC](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-human-in-the-loop-approval/203580 "2026-09-23T08:29:20Z")
The fourth and final part of the “Building Secure AI Agents with Microsoft Agent Framework and Auth0” blog post series is on keeping humans in the loop. Enjoy your reading!
---
## [Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-sending-email-with-token-vault/203174)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [September 8, 2026, 3:42pm UTC](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-sending-email-with-token-vault/203174 "2026-09-08T15:42:49Z")
Here is the third part of the blog post series on securing AI agent built with Microsoft Agent Framework. This part focuses on sending emails on behalf of the user by leveraging the Auth0 Token Vault. Read on!
---
## [Programmatically Manage Team and Tenants with Auth0 Teams API (Beta)](https://community.auth0.com/t/programmatically-manage-team-and-tenants-with-auth0-teams-api-beta/196917)
**Author:** [@Bola](https://community.auth0.com/u/Bola)\
**Replies:** 15\
**Last updated:** [September 2, 2026, 3:55pm UTC](https://community.auth0.com/t/programmatically-manage-team-and-tenants-with-auth0-teams-api-beta/196917 "2026-09-02T15:55:17Z")
At Auth0, we’ve been working on extending Auth0 Teams to allow for much-needed programmatic management of Team members and their access to tenants. This also includes the much-requested ability for tenant creation. Here…
---
## [Building Secure AI Agents with Microsoft Agent Framework and Auth0: RAG Filtering](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-rag-filtering/202540)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [August 13, 2026, 3:59pm UTC](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-rag-filtering/202540 "2026-08-13T15:59:05Z")
This is the second part of the blog post series on securing AI agent built with Microsoft Agent Framework. In this part, we implement a RAG system and make sure that users can access what they are authorized to work on. …
---
## [Building Secure AI Agents with Microsoft Agent Framework and Auth0: User Authentication](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-user-authentication/202234)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 3\
**Last updated:** [August 4, 2026, 7:16am UTC](https://community.auth0.com/t/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-user-authentication/202234 "2026-08-04T07:16:38Z")
Let’s walk through a blog post series about securing AI agents built with C# and the Microsoft Agent Framework. This first installment covers user authentication for your basic agent.
---
## [The Art of Consent Management in the OAuth World](https://community.auth0.com/t/the-art-of-consent-management-in-the-oauth-world/201732)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 3\
**Last updated:** [July 23, 2026, 7:57am UTC](https://community.auth0.com/t/the-art-of-consent-management-in-the-oauth-world/201732 "2026-07-23T07:57:15Z")
Learn how OAuth 2.0 has evolved in handling user consent and how Auth0 helps you implement it based on your application’s needs. Read on: The Art of Consent Management in the OAuth World
---
## [Want AI Agents That Don't Spill Secrets? Don't Give Them Secrets](https://community.auth0.com/t/want-ai-agents-that-dont-spill-secrets-dont-give-them-secrets/201173)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 26, 2026, 4:53pm UTC](https://community.auth0.com/t/want-ai-agents-that-dont-spill-secrets-dont-give-them-secrets/201173 "2026-06-26T16:53:18Z")
Because LLMs process all context window content equally, any exposed secrets like API keys can be leaked. The golden rule: never grant AI agents access to secrets you must protect. Learn more by reading my latest blog p…
---
## [Implementing the Device Authorization Flow in a C# Console App](https://community.auth0.com/t/implementing-the-device-authorization-flow-in-a-c-console-app/200946)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 18, 2026, 9:07am UTC](https://community.auth0.com/t/implementing-the-device-authorization-flow-in-a-c-console-app/200946 "2026-06-18T09:07:35Z")
Check out this tutorial to learn how to implement the OAuth 2.0 Device Authorization flow in a .NET console application built with C#: Implement the Device Authorization Flow in a C# Console App
---
## [The Many Faces of OAuth 2.0 Token Exchange](https://community.auth0.com/t/the-many-faces-of-oauth-2-0-token-exchange/200512)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [June 3, 2026, 4:22pm UTC](https://community.auth0.com/t/the-many-faces-of-oauth-2-0-token-exchange/200512 "2026-06-03T16:22:48Z")
Token exchange is a pattern that has multiple use cases. Learn what they are and what is the best approach in your own scenario by reading The Many Faces of OAuth 2.0 Token Exchange
---
## [\[Beta\] Connect your AI agent to Auth0 via MCP — Looking for testers](https://community.auth0.com/t/beta-connect-your-ai-agent-to-auth0-via-mcp-looking-for-testers/199388)
**Author:** [@Bola](https://community.auth0.com/u/Bola)\
**Replies:** 1\
**Last updated:** [May 25, 2026, 5:53pm UTC](https://community.auth0.com/t/beta-connect-your-ai-agent-to-auth0-via-mcp-looking-for-testers/199388 "2026-05-25T17:53:14Z")
Hey community, We’re running a closed beta for Auth0 Hosted MCP Server — a way to connect your AI development environment (Claude Code, Cursor, Codex) directly to your Auth0 tenant. Once connected, you can ask your age…
---
## [What AI Tools, MCP Servers, and Skills Actually Do](https://community.auth0.com/t/what-ai-tools-mcp-servers-and-skills-actually-do/200091)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [May 19, 2026, 1:12pm UTC](https://community.auth0.com/t/what-ai-tools-mcp-servers-and-skills-actually-do/200091 "2026-05-19T13:12:12Z")
Confused about the difference between AI tools, MCP servers, and Skills? If so, this article is for you: What AI Tools, MCP Servers, and Skills Actually Do
---
## [AI Agents Have Two Souls. You Only Control One](https://community.auth0.com/t/ai-agents-have-two-souls-you-only-control-one/199759)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [May 9, 2026, 7:40am UTC](https://community.auth0.com/t/ai-agents-have-two-souls-you-only-control-one/199759 "2026-05-09T07:40:17Z")
From a security perspective, the code around the LLM matters more than the LLM itself: learn about the two souls of an AI agent. Read more…
---
## [Things Developers Get Wrong About the Backend for Frontend Pattern](https://community.auth0.com/t/things-developers-get-wrong-about-the-backend-for-frontend-pattern/199296)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [April 24, 2026, 3:00pm UTC](https://community.auth0.com/t/things-developers-get-wrong-about-the-backend-for-frontend-pattern/199296 "2026-04-24T15:00:48Z")
Is everything clear on the Backend For Frontend pattern? If you’re still unsure, this article can help: Things Developers Get Wrong About the Backend for Frontend Pattern
---
## [Common FAPI Misconceptions](https://community.auth0.com/t/common-fapi-misconceptions/198198)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [March 19, 2026, 2:39pm UTC](https://community.auth0.com/t/common-fapi-misconceptions/198198 "2026-03-19T14:39:37Z")
Confused about FAPI and its relationship with OAuth and OpenID Connect? Looking for clarifications about some of the FAPI features and use cases? Here is a blog post for you: Common FAPI Misconceptions
---
## [Secure a C# MCP Server with Auth0](https://community.auth0.com/t/secure-a-c-mcp-server-with-auth0/198026)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [March 12, 2026, 5:06pm UTC](https://community.auth0.com/t/secure-a-c-mcp-server-with-auth0/198026 "2026-03-12T17:06:16Z")
Learn how to build and secure an MCP server in .NET using Auth0. Read the full post here.
---
## [Protect Your MCP Tools With Auth0 FGA in TypeScript](https://community.auth0.com/t/protect-your-mcp-tools-with-auth0-fga-in-typescript/197705)
**Author:** [@anita.clarke](https://community.auth0.com/u/anita.clarke)\
**Replies:** 0\
**Last updated:** [February 27, 2026, 2:51pm UTC](https://community.auth0.com/t/protect-your-mcp-tools-with-auth0-fga-in-typescript/197705 "2026-02-27T14:51:07Z")
Learn how to secure your Model Context Protocol (MCP) tools using Auth0 FGA and TypeScript. Implement relationship-based access control for AI applications. Brought to you by @jesstemporal Read the full post: https://a…
---
## [Federated Identity vs. Single Sign-On: Key Differences](https://community.auth0.com/t/federated-identity-vs-single-sign-on-key-differences/197311)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [February 16, 2026, 11:59am UTC](https://community.auth0.com/t/federated-identity-vs-single-sign-on-key-differences/197311 "2026-02-16T11:59:06Z")
What is the difference between Federated Identity and Single Sign-On? Here is a blog post explaining it to you, covering concepts, protocols, and implementation nuances.
---
## [MS Agent Framework and Python: Use the Auth0 Token Vault to Call Third-Party APIs](https://community.auth0.com/t/ms-agent-framework-and-python-use-the-auth0-token-vault-to-call-third-party-apis/193959)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 18\
**Last updated:** [February 15, 2026, 11:49am UTC](https://community.auth0.com/t/ms-agent-framework-and-python-use-the-auth0-token-vault-to-call-third-party-apis/193959 "2026-02-15T11:49:50Z")
Learn how to build a secure Python AI Agent with Microsoft Agent Framework and FastAPI and use Auth0 Token Vault to securely connect to the Gmail API. Read on here!
---
## [Setting Up Auth0 Custom Domains: A Complete Guide to DNS and SDK Configuration](https://community.auth0.com/t/setting-up-auth0-custom-domains-a-complete-guide-to-dns-and-sdk-configuration/197287)
**Author:** [@jesstemporal](https://community.auth0.com/u/jesstemporal)\
**Replies:** 1\
**Last updated:** [February 13, 2026, 8:40pm UTC](https://community.auth0.com/t/setting-up-auth0-custom-domains-a-complete-guide-to-dns-and-sdk-configuration/197287 "2026-02-13T20:40:26Z")
A comprehensive guide to configuring custom domains in Auth0, from DNS setup to updating your application code for SDKs and APIs.
---
## [Why Broken Access Control Still Dominates the OWASP Top 10 in 2026?](https://community.auth0.com/t/why-broken-access-control-still-dominates-the-owasp-top-10-in-2026/196513)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [January 23, 2026, 9:01am UTC](https://community.auth0.com/t/why-broken-access-control-still-dominates-the-owasp-top-10-in-2026/196513 "2026-01-23T09:01:41Z")
Explore why Broken Access Control remains the #1 OWASP risk in 2026. Learn how to bridge the gap between authentication and authorization using FGA and Policy as Code.
---
## [Discover User Lifecycle Changes via Event Streams – Now in Early Access](https://community.auth0.com/t/discover-user-lifecycle-changes-via-event-streams-now-in-early-access/186898)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 5\
**Last updated:** [January 15, 2026, 4:31pm UTC](https://community.auth0.com/t/discover-user-lifecycle-changes-via-event-streams-now-in-early-access/186898 "2026-01-15T16:31:06Z")
Help enable your systems to respond to user lifecycle changes asynchronously, at scale, and across your entire tech stack. Read more… :writing\_hand:t2: Brought to you by Brian Smith & Linda Gong
---
## [Auth0 My Account API: Let Users Manage Their Own Account](https://community.auth0.com/t/auth0-my-account-api-let-users-manage-their-own-account/195546)
**Author:** [@anita.clarke](https://community.auth0.com/u/anita.clarke)\
**Replies:** 1\
**Last updated:** [December 18, 2025, 5:13pm UTC](https://community.auth0.com/t/auth0-my-account-api-let-users-manage-their-own-account/195546 "2025-12-18T17:13:37Z")
Learn how the Auth0 My Account API securely enables client-side, self-service user management, eliminating the need for server-side proxies for features like passkey enrollment and account linking. Brought to you by @an…
---
## [FAPI for Developers: Here Is Your Guide](https://community.auth0.com/t/fapi-for-developers-here-is-your-guide/195535)
**Author:** [@anita.clarke](https://community.auth0.com/u/anita.clarke)\
**Replies:** 1\
**Last updated:** [December 16, 2025, 3:48pm UTC](https://community.auth0.com/t/fapi-for-developers-here-is-your-guide/195535 "2025-12-16T15:48:56Z")
A new ebook explains why FAPI is essential for regulated industries, and how to move beyond OAuth bearer tokens for top identity security. This comprehensive ebook provides the technical breakdown necessary to understa…
---
## [Demystifying OAuth Security: State vs. Nonce vs. PKCE](https://community.auth0.com/t/demystifying-oauth-security-state-vs-nonce-vs-pkce/195011)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [November 28, 2025, 9:26am UTC](https://community.auth0.com/t/demystifying-oauth-security-state-vs-nonce-vs-pkce/195011 "2025-11-28T09:26:58Z")
Have you ever wondered what the state, nonce, code\_challenge, and code\_verifier parameters are for in OAuth requests? This blog post will provide the answers you are looking for.
---
## [.NET 10: What’s New for Authentication and Authorization](https://community.auth0.com/t/net-10-what-s-new-for-authentication-and-authorization/194280)
**Author:** [@anita.clarke](https://community.auth0.com/u/anita.clarke)\
**Replies:** 1\
**Last updated:** [November 10, 2025, 5:45pm UTC](https://community.auth0.com/t/net-10-what-s-new-for-authentication-and-authorization/194280 "2025-11-10T17:45:16Z")
.NET 10: What’s New for Authentication and Authorization Dive into the latest .NET 10 updates for authentication and authorization, and important breaking changes for .NET developers. Brought to you by @andrea.chiarell…
---
## [The Three Laws of AI Security](https://community.auth0.com/t/the-three-laws-of-ai-security/194197)
**Author:** [@anita.clarke](https://community.auth0.com/u/anita.clarke)\
**Replies:** 1\
**Last updated:** [November 7, 2025, 3:43pm UTC](https://community.auth0.com/t/the-three-laws-of-ai-security/194197 "2025-11-07T15:43:07Z")
The Three Laws of AI Security What principles guide AI security? We adapt Asimov’s Three Laws for modern AI agents to solve core LLM security challenges, from data control to tool access. Brought to you by @andrea.chia…
---
## [Introducing Auth0 Signals Email Verification API](https://community.auth0.com/t/introducing-auth0-signals-email-verification-api/46341)
**Author:** [@robertino.calcaterra](https://community.auth0.com/u/robertino.calcaterra)\
**Replies:** 3\
**Last updated:** [November 3, 2025, 9:07am UTC](https://community.auth0.com/t/introducing-auth0-signals-email-verification-api/46341 "2025-11-03T09:07:47Z")
Assess your users’ reputation using the Auth0 Signals Email Verification API. Read more Brought for you by Diego Parrilla
---
## [Demystifying JOSE, the JWT Family: JWS, JWE, JWA, and JWK Explained](https://community.auth0.com/t/demystifying-jose-the-jwt-family-jws-jwe-jwa-and-jwk-explained/192885)
**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [October 7, 2025, 1:08pm UTC](https://community.auth0.com/t/demystifying-jose-the-jwt-family-jws-jwe-jwa-and-jwk-explained/192885 "2025-10-07T13:08:20Z")
Confused by the various acronyms surrounding JWT? Want to know what JWS and JWE are and how they relate to JWT? This blog post introduces the members of the JOSE family and tries to clarify things for you! :nerd\_face: …
[Next page](https://community.auth0.com/c/blog-discuss/56.md?page=1)