Device-level authentication?

[bill.white]

Does Auth0 support device-level authentication?

Our use case has an app using one account on the existing IAM, and the app runs on some 250 registered (with the IAM) devices. This is so that any one of the users can “grab and go” with any of the 250 mobile devices without having to sign into an individual account.

Does Auth0 support this use case?

Thanks!

[john.gateley]

Hi @bill.white

Auth0 is very flexible and can support this, probably in a number of ways.
Without more detail, I can only guess at your requirements, but one solution would be:

• Create a device account with password known to an admin
• Admin configures each device with the same PIN and logs each device in to the device account.
• Login gets a refresh token, and this is used to get new access tokens as needed.
• Refresh token is protected by the device PIN (thus, PIN must be the same for all devices).

The security around this should be carefully examined. This present a lot of attach surface, and the security requirements will guide you to the best solution.

John