# How Monthly Active User works with login denied users

**URL:** <https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654>\
**Category:** Get Help\
**Created:** [August 10, 2021, 5:01am UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654 "2021-08-10T05:01:43Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![toshihiro.kanai](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/toshihiro.kanai/32/13728_2.png) [@toshihiro.kanai](https://community.auth0.com/u/toshihiro.kanai)\
**Post date:** [August 10, 2021, 5:01am UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/1 "2021-08-10T05:01:43Z")

</div>

Hi there!

I just need some help to understand what is actually called “login” in MAU.

We’re adding support for SAML authentication with Auth0 (our application is Service Provider in this case). I think all people having the specified IdP accounts can pass Auth0 authentication, however, don’t want all of them to login to our application, only people registered to our service should be logged in instead.

After looking at the docs, we’ve found out that we could do that limitation with Actions as it provides `api.access.deny` to deny some user logins. Although we’re denying the user with specific email address, we see that an account is created on User Management page.  
So my question is: When the user access is denied with Actions, does the login still count as Monthly Active User? I reckon it doesn’t because there’s a " Failed Login" event in the user history but not “Success Login”. I need to make sure of this since it could be important to our finance.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 11, 2021, 8:45pm UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/3 "2021-08-11T20:45:34Z")

</div>

Hi @toshihiro.kanai,

Welcome back!

This is answered here:

> [@Trying to understand MAU (Monthly Active Users) pricing](https://community.auth0.com/t/trying-to-understand-mau-monthly-active-users-pricing/49222):
>
> I’m trying to understand how MAU is calculated. Is it per tenant or per application or per authentication method, or per all of them. From what I was able to understand, if you have 100,000 active users who actively use at least 3 authentication methods (email, passwordless sms+email) and 10 applications during the month, then how much is the MAU for that particular month: a. 100,000 b. 100,000 x 3 auth methods = 300,000 or c. 100,00 x 3 auth methods x 10 clients = 3,000,000 Which one is i…

Let me know if you have questions.

---

<div class="post-metadata">

**Author:** ![toshihiro.kanai](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/toshihiro.kanai/32/13728_2.png) [@toshihiro.kanai](https://community.auth0.com/u/toshihiro.kanai)\
**Post date:** [August 16, 2021, 10:55am UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/4 "2021-08-16T10:55:52Z")

</div>

Hello @dan.woda!

Thank you so much for your answer! I just want to make sure that a user with only “Login Failed” events are not counted as login and therefore not an MAU?

 ![Screenshot 2021-08-16 195055](https://global.discourse-cdn.com/auth0/original/3X/b/6/b6f525fd7eba4766f7e53ab66a08a3c753741956.png)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 16, 2021, 4:21pm UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/5 "2021-08-16T16:21:01Z")

</div>

> Monthly Active Users are counted as users who log in or refresh their token during the given month.

This would indicate a user who failed to log in would not count.

---

<div class="post-metadata">

**Author:** ![toshihiro.kanai](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/toshihiro.kanai/32/13728_2.png) [@toshihiro.kanai](https://community.auth0.com/u/toshihiro.kanai)\
**Post date:** [August 16, 2021, 11:23pm UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/6 "2021-08-16T23:23:45Z")

</div>

Thank you! I’m glad it works that way.

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [August 17, 2021, 6:59pm UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/7 "2021-08-17T18:59:49Z")

</div>

Let us know if you have any other questions.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [September 1, 2021, 7:00pm UTC](https://community.auth0.com/t/how-monthly-active-user-works-with-login-denied-users/67654/8 "2021-09-01T19:00:01Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
