Frequently Asked Questions

Multi-factor authentication (MFA) adds an additional layer of security by requiring users to verify their identity using two or more verification methods:

1. Something they know (password, PIN)
2. Something they have (mobile device, security key)
3. Something they are (biometrics like fingerprint or face)

AuthAction's MFA implementation is highly customizable, allowing you to configure which factors are required based on risk level, user role, or other contextual factors. Our adaptive MFA can also adjust security requirements based on user behavior and risk signals.

Single Sign-On (SSO) is an authentication method that allows users to access multiple applications with one set of credentials. When a user logs into one application, they are automatically authenticated for all other connected applications without needing to log in again.

AuthAction's SSO solution supports all major protocols including SAML 2.0, OAuth 2.0, and OpenID Connect. Our implementation allows for seamless integration with your existing applications and third-party services, creating a unified authentication experience for your users while maintaining centralized control over access policies.

AuthAction provides support for all major programming languages and frameworks including:

• JavaScript/TypeScript (React, Angular, Vue, Node.js)
• Python (Django, Flask, FastAPI)
• Java (Spring, Jakarta EE)
• Ruby (Rails, Sinatra)
• .NET (ASP.NET Core, Blazor)
• PHP (Laravel, Symfony)
• Go
• Swift and Kotlin for mobile development

Our RESTful APIs allow integration with virtually any programming language or platform, even those not explicitly covered by our SDKs.

AuthAction takes data privacy extremely seriously:

• All data is encrypted in transit and at rest using industry-standard encryption
• Passwords are never stored in plaintext - we use strong, adaptive hashing algorithms
• User data is isolated in our multi-tenant architecture
• We maintain compliance with GDPR, CCPA, and other privacy regulations
• Customers maintain ownership of their user data
• We offer data residency options to keep information in specific geographic regions

If you exceed your plan's monthly active user (MAU) limit, we won't interrupt your service. You'll be billed for the additional users at a per-user rate based on your current plan tier. We'll notify you when you're approaching 80% of your user limit so you can decide whether to upgrade to a higher tier or continue with overage billing.

For customers with predictable growth, we recommend upgrading to a plan that accommodates your expected user base to receive the best pricing.

Yes, we offer a 14-day free trial of our Business plan with no credit card required. This gives you full access to explore our features and determine if AuthAction is the right fit for your needs. During the trial, you can:

• Access all Business plan features
• Test integration with your applications
• Configure authentication flows and policies
• Receive implementation support from our team

At the end of the trial, you can choose the plan that works best for you or contact our sales team to discuss custom options.

AuthAction employs multiple layers of security to protect user credentials:

• Passwords are never stored in plaintext
• We use adaptive hashing algorithms with unique salts for each credential
• All data is encrypted in transit using TLS 1.3
• All sensitive data is encrypted at rest using AES-256
• We enforce robust password policies with customizable requirements
• We support secure password recovery flows with time-limited tokens
• We monitor for compromised credentials using breach databases
• Our zero-knowledge architecture ensures even our own staff cannot access plain-text credentials

AuthAction offers a comprehensive set of security features you can enable for your users:

• Multi-factor authentication with multiple verification methods
• Adaptive authentication based on risk signals
• Brute force protection and account lockout policies
• IP-based access restrictions
• Device management and trusted device tracking
• Session management with configurable timeouts
• Suspicious activity detection and alerts
• Compromised credential checking
• Passwordless authentication options

These features can be configured based on your security requirements and user experience goals.