Postmortem
On April 3, 2025, our Engineering team investigated customer reports of passwordless magic link emails not working for their environments. End users were receiving magic link emails with an 'undefined domain' in the url for magic link . This issue did not affect successful user authentication overall and was isolated to scenarios where tenant admins create a passwordless user using admin API with 'email_verified=false'. The root cause of this issue was traced back to a code regression our Engineering team introduced. These errors were mitigated following our rollback of the offending code changes in all impacted environments. To prevent this issue from recurring, we are reviewing our functional tests with key learnings from this incident. We sincerely apologize for the impact this issue had on you and your users.
Posted Apr 14, 2025 - 16:22 UTC
Resolved
This issue has now been fully resolved. Please contact our Support team should you require any further assistance.
Posted Apr 03, 2025 - 23:32 UTC
Monitoring
We applied a fix for the issue and are monitoring the system.
Posted Apr 03, 2025 - 23:30 UTC
Update
Our deployments to remediate this issue are still ongoing and we are beginning to see full recovery for impacted environments. We will post an additional update here over the next few hours as we review the rollout of these deployments and customers will continue to see gradual remediation for this.
Posted Apr 03, 2025 - 21:32 UTC
Update
Our Engineering team is continuing to rollout a fix for this issue however we have now identified that a very limited subset of users were affected by this. Some users created that are using magic link passwordless verification emails may have encountered an email link issue when attempting to authenticate. We will confirm here in 1-2 hours once our rollout fix for this has completed.
Posted Apr 03, 2025 - 18:28 UTC
Update
Our Engineering team is continuing to review an issue we identified which has impacted use of one time password magic link for authentication across multiple environments. We are working urgently to remediate this issue and will advise once our mitigation efforts have completed.
Posted Apr 03, 2025 - 17:24 UTC
Identified
Our Engineering team has identified a regression which is impacting end user ability to utilize one time password magic link based authentication. We are working urgently to mitigate this issue and we will post additional updates here in 15 minutes.
Posted Apr 03, 2025 - 17:15 UTC
Investigating
We are currently investigating an incident that impacted our services. Our team is actively working to understand the root cause and mitigate the issue. We will provide updates as we gather more information.
Posted Apr 03, 2025 - 16:18 UTC
This incident affected: Auth0 Europe (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 Australia (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 US (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 US-3 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 JP-1 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 EU-2 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 US-4 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 UK-1 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), Auth0 CA-1 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery), and Auth0 US-5 (PROD) (User Authentication, Machine to Machine Authentication, Email Delivery).