Problem statement:
How do I find users which were blocked via brute force protection and is there a way to unblock all the users at once?
Solution
Firstly, you can find which users are blocked by brute-force protection by searching the tenant logs for type: limit_wc to filter for Brute Force blocks. More info on this can be found in the Log Event Type Codes.
Unfortunately, there is no way to unblock multiple user blocks with a single API call. In this case, we recommend writing a script to automate the process of deleting each user’s block.
The Management API endpoint used to unblock a user accepts only a string of a single user id and not an array. More info on this can be found in the Management API Delete User Blocks by ID endpoint
Alternatively, there is an option to unblock users in the Auth0 Dashboard under the User Management menu, but you would still need to unblock each user.