Monitor authentication events from your Auth0 tenant in real-time. Choose between Auth0 Actions for instant events or Log Streams for comprehensive audit logging.
LiteSOC is officially listed on the Auth0 Marketplace. Install directly from the marketplace with a single click, no code required.
Install from Auth0 MarketplaceBoth methods work great. Choose based on your needs.
Create custom Actions to send events to LiteSOC in real-time.
Go to your LiteSOC dashboard → Settings → API Keys to create or copy your Live API key.
https://litesoc.io/dashboard/settings/api-keysIn your Auth0 Dashboard, go to Actions → Library → Create Action → Build from scratch. Name it "LiteSOC Login Tracking" and select the Login / Post Login trigger.
Paste this code into your Action. It captures IP, User-Agent, and risk scores.
exports.onExecutePostLogin = async (event, api) => {
const LITESOC_API_KEY = event.secrets.LITESOC_API_KEY;
await fetch('https://api.litesoc.io/collect', {
method: 'POST',
headers: {
'Content-Type': 'application/json',
'X-API-Key': `${LITESOC_API_KEY}`
},
body: JSON.stringify({
event: 'auth.login_success',
actor: {
id: event.user.user_id,
email: event.user.email
},
user_ip: event.request.ip,
metadata: {
auth0_tenant: event.tenant.id,
mfa_used: event.authentication?.methods
?.some(m => m.name === 'mfa') || false
}
})
});
};In the Action editor, click the 🔑 Secrets icon on the left sidebar. Add a new secret named LITESOC_API_KEY with your API key value.
Click Deploy, then go to Actions → Flows → Login. Drag your new Action into the flow and click Apply.
We provide ready-to-use templates for other Auth0 triggers:
auth.login_successPost-LoginPost-Login Action fires on successful authentication
auth.login_successPost-RegistrationPost-User-Registration Action fires when a new user signs up
auth.password_resetPost-Change-PasswordPost-Change-Password Action fires when password is changed
auth.mfa_enabledSend-Phone-MessageSend-Phone-Message Action fires when MFA code is sent
Configure a webhook Log Stream for zero-code integration.
Go to your LiteSOC dashboard → Settings → API Keys to create or copy your Live API key.
In your Auth0 Dashboard, go to Monitoring → Streams → Create Log Stream → Custom Webhook.
Set the Payload URL to include your API key as a query parameter:
https://api.litesoc.io/webhooks/auth0?api_key=lsoc_live_YOUR_API_KEYReplace lsoc_live_YOUR_API_KEY with your actual API key.
Choose which events to stream. We recommend at least:
Click Save. Auth0 will send a test event — check your LiteSOC dashboard to confirm it arrived.
Auth0 log event types are automatically mapped to LiteSOC's standard events.
| Auth0 Event Type | LiteSOC Event | Severity |
|---|---|---|
| s (Success Login) | auth.login_success | info |
| ss (Success Signup) | auth.login_success | info |
| f, fp, fu (Failed Logins) | auth.login_failed | medium |
| scp (Success Change Password) | auth.password_reset | medium |
| gd_auth_succeed | auth.login_success | info |
| gd_auth_failed | auth.login_failed | high |
| gd_enrollment_complete | auth.mfa_enabled | info |
| sapi (Success API Operation) | admin.settings_changed | high |
| limit_wc (Rate Limit) | security.rate_limit_exceeded | high |
| w (Warning) | security.suspicious_activity | high |
Unlike some integrations, Auth0 provides IP addresses in both Actions and Log Streams. This means you get full Behavioral AI detection out of the box:
Having trouble with your Auth0 integration? Check out our resources or reach out.