What Does a User from a Sanctioned Country Blocked by Auth0 See on a Login Attempt?

Problem statement

Per this notification, Okta is blocking all Users, including administrator Users and all end Users of Customers, from logging in to Okta Service (including the Auth0 Platform), from certain regions, to strengthen customers’ and Okta’s existing, contractual responsibilities to remain in compliance with certain U.S. export control restrictions.

What does a user from a sanctioned country blocked by Auth0 see on a login attempt?

Solution

If the end user is attempting to log in from an IP that is blocked, they will see a 403 error returned from Auth0’s network edge. We note that Auth0 is doing IP blocking of requests from the countries mentioned in the notification, and that this does not impact tenant status in any way, but rather traffic flowing to all Auth0 hosted endpoints.