# Rate limitt reached **URL:** \ **Category:** Get Help\ **Tags:** rate-limit, login\ **Created:** [September 30, 2026, 9:16am UTC](https://community.auth0.com/t/rate-limitt-reached/203808 "2026-09-30T09:16:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Alois.Goeth](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/alois.goeth/32/72706_2.png) [@Alois.Goeth](https://community.auth0.com/u/Alois.Goeth)\ **Post date:** [September 30, 2026, 9:16am UTC](https://community.auth0.com/t/rate-limitt-reached/203808/1 "2026-09-30T09:16:13Z")
Hi, we are currently preparing a Go Live of a customer portal. We have like 10 users that are currently testing the production environment and ran already into rate limits. I checked the logs but did not find anything that relates to rate limits. I used filters like type:api\_limit or type:limit\_delegation but there were no logs. Can you help me examining the issues. ![image](https://global.discourse-cdn.com/auth0/original/3X/7/b/7b1b0d9c1c5fa773203fdbc55256958e80ee44a8.png) Ready to post? 🔎 First try searching for your answer. ---
**Author:** ![gerald.czifra](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gerald.czifra/32/75301_2.png) [@gerald.czifra](https://community.auth0.com/u/gerald.czifra)\ **Post date:** [October 1, 2026, 1:27am UTC](https://community.auth0.com/t/rate-limitt-reached/203808/4 "2026-10-01T01:27:25Z")
Hi @Alois.Goeth Thank you for reaching out to us! I understand that your application is hitting a rate limit with 10 users running tests, however your logs do not show any related records. **Overview** When you are filtering against [api\_limit](https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-use-cases#api_limit), this log type is triggered when a global rate limit is exceeded, however it is not triggered for user-level, IP-level, or endpoint-specific rate limits. In addition, Auth0 throttles global rate limit logs: if they were hitting a global limit, Auth0 only generates [**one** `api_limit` **log per minute**](https://support.auth0.com/center/s/article/api-limit-Logs-are-missing-from-tenant-logs) for each 429 request to prevent flooding the tenant logs. When encountering the rate limit error screen shared in the screenshot, can you please click on the " See details for this error " link? This should provide additional technical details regarding the error itself which can help pin-point the exact cause. **Potential causes** To provide additional details, here are some possible causes for seeing this rate limiting, based on the information we currently have: **1. Universal Login (UL) Prompt Limits** The New Universal Login experience has strict, non-customizable limits applied per transaction and per IP to ensure platform stability: - **Page loads:** Up to 10 per minute. - **Login submissions:** Up to 5 per minute. If the testers are aggressively reloading the login prompt or repeatedly submitting credentials, the UI will throw an `invalid_request: You've exceeded the rate limit for /u/login/identifier` error. This does not generate an `api_limit` log. **2. IP-Level or User/Device-Level Limits** If the users are testing from a single corporate NAT/VPN, they might be hitting IP rate limits (like the “same user login” rate limit of [20 attempts per minute from one IP](https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy#:~:text=makes%2020%20login%20attempts%20in%20one)). - **How to find this:** Instead of searching by `type:api_limit`, search the tenant logs for the following text descriptions: **3. Brute Force or Bot Detection** If the testers are intentionally failing logins (e.g., testing incorrect passwords or expired magic links), they may be triggering Brute-Force Protection or Bot Detection. - **How to find this:** Looking forward to your input on the above! Best regards, Gerald ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [October 20, 2026, 1:11am UTC](https://community.auth0.com/t/rate-limitt-reached/203808/6 "2026-10-20T01:11:22Z")
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.