Our Auth0 team subscription is Free ($0). We have an EU development tenant currently in its trial period and must keep costs at £0.
Your public pricing lists Custom Social Connections as included in Free and two Token Vault connected apps. However, the Teams subscription comparison marks Custom Social Connections as Trial and shows four Token Vault integrations during the trial.
Please confirm:
Will one custom OAuth2 connection used exclusively for Connected Accounts/Token Vault, backed by a GitHub App, remain available after trial expiry on Free?
Is access-token exchange into Token Vault using a Custom API Client included on Free? We are not using Custom Token Exchange Profiles.
Can My Account API Require 2FA remain enabled on Free when no tenant MFA factors are enrolled, and what assurance does that provide for verified-email database users?
Is the Free Token Vault allowance counted by configured provider integration, rather than connected end-user account?
Please clarify the existing entitlement only. Do not change our subscription, activate paid features, or start a paid contract.
I understand you are looking for additional information on specific questions regarding the Free tier features. Allow me to tackle each one and provide more context.
Recommended solution
Yes, it will remain available. The Auth0 Free plan supports two Custom Social Connections (Custom OAuth2 compatible IdPs). You can continue to use your custom GitHub App OAuth2 connection exclusively for Connected Accounts/Token Vault after the trial period ends.
Yes, this is included. Standard retrieval of third-party access tokens from the Token Vault is supported on the Free plan as part of the “Secure Agentic AI workflows” capabilities. Because you are using a standard Custom API Client flow and explicitly not using the advanced “Custom Token Exchange” (RFC 8693) profiles feature—which is restricted to the Professional tier—your implementation will remain functional. Please keep in mind the limit of two connected applications managed in the Token Vault for the Free tier.
It can remain enabled, but it provides no 2FA assurance. Because Multi-Factor Authentication (MFA) is a paid feature, your Free tier users cannot actually enroll in MFA factors. Even if a database user has a verified email (email_verified: true), email is not considered an “enrolled MFA factor” unless Email MFA is actively configured and supported by your plan.
It is counted by configured provider integration. Any dashboard limits regarding Token Vault or Social Connections apply strictly to the number of provider integrations you configure in the Auth0 dashboard (e.g., your GitHub App connection), not the number of end-users who connect their accounts.
Note: Auth0 recently upgraded the Free plan to include unlimited Social Connections as long as the global rate limits are respected, so a single custom GitHub integration is well within your free entitlement.
We hope this information helped clarify some details with regards to the Free subscription. Please reach out to us for any other issues or requests, we will gladly look into it.