Free plan entitlements after trial: third-party OAuth client and user-delegated grants

Get Help
1

Please clarify Auth0 Free plan entitlements after the trial expires.

For a single-user personal application, we plan to use:

  • A pre-registered third-party Regular Web Application
  • client_secret_post or client_secret_basic
  • Authorization Code with PKCE S256
  • Refresh tokens / offline_access
  • A custom API with one scope, reports:write
  • An explicit user-delegated client grant (subject_type=user)
  • Per-app API authorization

We will not use RBAC, Role Management, Private Key JWT, or M2M grants.
Our resource server independently restricts access to one verified user sub.

Are all of the above supported on the Free plan after the trial ends?
If not, which exact feature requires a paid plan?
Please provide the applicable documentation or entitlement reference.

3

Hi @2032243755

Welcome to the Auth0 Community!

I understand that you are interested to know if the outlined entitlements are covered by the Free plan, once your Trial period ends.

Resolution

All of the requested authentication flows and custom API features are fully supported on the Auth0 Free plan after the initial trial expires.

Supported Features on the Auth0 Free Plan

  1. Regular Web Application & Client Secrets: Registering a standard third-party Regular Web Application and utilizing client_secret_post or client_secret_basic are core Auth0 features included in the Auth0 Free plan.

  2. Authorization Code with PKCE S256: The Authorization Code flow with Proof Key for Code Exchange (PKCE) S256 is fully supported and recommended for confidential applications on the Auth0 Free plan.

  3. Refresh Tokens and Offline Access: Refresh tokens requested via the offline_access scope are supported for standard user-delegated sessions within the Auth0 Free plan.

  4. Custom API and User-Delegated Grants: Defining a custom API (Resource Server), creating a custom scope (such as reports:write), and requesting user consent (subject_type=user) are entirely supported on the Auth0 Free plan using the audience parameter for API authorization.

  5. Monthly Active Users (MAUs): The Auth0 Free plan accommodates up to 25,000 Monthly Active Users, ensuring a single-user application will remain comfortably within the free usage limits.

We hope this information created a clearer understanding of the capabilities of the Free plan. Please reach out to us for any other issues or requests, we will gladly look into it.

Have a great one!
Gerald