function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
John OKeefe 15John OKeefe 15 

OAuth 2.0 - "rate_limit_exceeded"

I am noticing that there is a error for OAuth in the documentation that states: "rate_limit_exceeded—Number of logins exceeded". What is the limit on logins?
NagendraNagendra (Salesforce Developers) 
Hi John,

For database connections, Auth0 limits certain types of repeat login attempts depending on the user account and IP address, some of these limits are set as part of Anomaly Detection:
  • If a user enters their password incorrectly more than 10 times from a single IP address, they will be blocked from logging into that account from that IP address. Auth0 will send an email containing a link to unblock the user to the owner of the database account. This is the Brute Force Protection shield which is part of Auth0's Anomaly Detection.
  • If a user attempts to log in 20 times per minute as the same user from the same location, regardless of having the correct credentials, the rate limit will come into effect. When this happens, the user can make 10 attempts per minute. Most endpoints at the moment support this rate limit, and soon all of them will.
Hope this helps.

Thanks,
Nagendra