What is Fine-Grained Authorization (FGA) and how does it differ from traditional authorization?

FGA is Okta's new authorization-as-a-service product that enables developers to define relationship-based access control models centrally, rather than embedding authorization logic within application code. It supports authorization models ranging from coarse-grained to fine-grained permissions, allowing more granular control over who can access what resources based on their relationship to those resources, which improves security posture and developer efficiency.

How does Progressive Factor Enrollment improve the MFA experience?

Progressive Factor Enrollment uses post-login actions and new API commands to prompt users to enroll in specific MFA factors based on contextual signals about the user, organization, or application. This allows organizations to design authentication flows that reduce friction, accommodate user preferences, and align with security policies by enrolling users in appropriate factors at the right time rather than requiring upfront enrollment in all factors.

Auth0 March 2024 Release: FGA, MFA Enrollment & Guardian

Name: Auth0 March 2024 Release: FGA, MFA Enrollment & Guardian
Uploaded: 2026-04-29T10:05:15-04:00
Duration: 2 min 52 s
Description: TL;DR Fine-Grained Authorization (FGA) launches as a new authorization-as-a-service product, enabling relationship-based access control models that centralize authorization logic outside application code for improved security and developer efficiency. ...

Okta

04/29/2026

0 (0%)

Report Like Favorite

Transcript

We will go over this month's new available features. Generally Available Features Fine-grained Authorization FGA is a new product offering from Okta. It's authorization as a service that enables developers to design authorization models from coarse-grained to fine-grained and everything in between in a way that's centralized, fast, and easy to use. With FGA, you can get much more granular with access rules, increasing security posture. Define authorization models for all of your applications in FGA, taking authorization out of the application, increasing developer efficiency. And since FGA allows developers to define authorization models based on the relationship a user has to a resource, they can better manage complexity as they add more users who need access to more resources. Progressive Factor Enrollment Using the post-login action, you can now easily customize your MFA flows to prompt users to enroll in specific factors. After a user enrolls in a factor, they can use that factor as a secondary method of authentication in future logins. Customer Identity Cloud now includes two new commands in the post-login API object, enroll with and enroll with any. These commands, paired with our recent Customize MFA Factor Selection feature release, allow you to specify precisely how to enroll and challenge the user with MFA factors based on contextual signals about the user, the organization, or the application they are logging into. These changes provide greater flexibility with MFA to design an authentication flow that reduces friction, cater to your end user's preferences, and align authentication with your organization's security policies. One-Time Password Mobile Enrollment for Guardian Guardian is a mobile application for iOS and Android devices that allows users to complete MFA with push notifications or temporary one-time passwords. Guardian can deliver the push notifications to users enrolled devices typically mobile phones or tablets or generate one-time passwords directly within the app. Users can then quickly respond to these push notifications or retrieve a one-time password to complete their login. Previously, the only way for users to enroll in Guardian was via a QR code. For users who didn't have access to scan the QR code on another device, this prevented enrollment. To give users more flexibility and make the enrollment process easier, end users can now manually enroll with a verification code as an alternative to using a QR code. Thanks for viewing the Customer Identity Cloud Monthly release highlights. Information and documentation on the latest updates can be found at auth0.com.

TL;DR

Fine-Grained Authorization (FGA) launches as a new authorization-as-a-service product, enabling relationship-based access control models that centralize authorization logic outside application code for improved security and developer efficiency.
Progressive Factor Enrollment introduces new post-login API commands (enroll with and enroll with any) that allow contextual MFA enrollment based on user, organization, or application attributes, reducing friction while maintaining security policies.
Guardian mobile authenticator now supports manual enrollment via verification codes, providing an alternative to QR code scanning for users who cannot access a second device during enrollment.

Summary

This March 2024 release update for Auth0's Customer Identity Cloud introduces three significant generally available features focused on authorization and authentication flexibility. The headline announcement is Fine-Grained Authorization (FGA), a new authorization-as-a-service product that enables developers to design centralized, relationship-based access control models ranging from coarse to fine-grained permissions. This approach removes authorization logic from application code, improving both security posture and developer efficiency while managing complexity as user and resource counts scale. The release also enhances multi-factor authentication capabilities with Progressive Factor Enrollment, which uses post-login actions and new API commands to allow contextual MFA enrollment based on user, organization, or application signals. Finally, the Guardian mobile authenticator app now supports manual enrollment via verification codes as an alternative to QR code scanning, addressing accessibility challenges for users who cannot scan codes on a separate device. These updates collectively strengthen Auth0's identity platform by providing more granular control over authorization decisions and more flexible authentication enrollment workflows.

Chapters

0:00 - Introduction
0:11 - Fine-Grained Authorization
0:56 - Progressive Factor Enrollment
1:49 - Guardian Mobile Enrollment

Key Quotes

0:17 "It's authorization as a service that enables developers to design authorization models from coarse-grained to fine-grained and everything in between in a way that's centralized, fast, and easy to use."
0:34 "Define authorization models for all of your applications in FGA, taking authorization out of the application, increasing developer efficiency."
1:36 "These changes provide greater flexibility with MFA to design an authentication flow that reduces friction, cater to your end user's preferences, and align authentication with your organization's security policies."

Categories:

» Cybersecurity » Identity & Access Management (IAM)
» Data Protection

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

10/27/2026

11:00 AM

10/27/2026

Maximize the Value and Security of Your Microsoft Investment

https://www.truthinit.com/index.php/channel/2178/maximize-the-value-and-security-of-your-microsoft-investment/
10/27/2026

11:00 AM

10/27/2026

Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
10/27/2026

01:00 PM

10/27/2026

The HUMAN Experience: Harnessing Page Intelligence for Real-World Impact

https://www.truthinit.com/index.php/channel/2139/the-human-experience-harnessing-page-intelligence-for-real-world-impact/
10/28/2026

01:00 AM

10/28/2026

APAC's Comprehensive Approach to Ensuring AI Security Across All Platforms

https://www.truthinit.com/index.php/channel/2125/apacs-comprehensive-approach-to-ensuring-ai-security-across-all-platforms/
10/28/2026

06:00 AM

10/28/2026

EMEA: Ensuring Comprehensive AI Security Across All Platforms

https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-ai-security-across-all-platforms/
10/28/2026

01:00 PM

10/28/2026

Ensuring AI Security Across the Americas

https://www.truthinit.com/index.php/channel/2126/ensuring-ai-security-across-the-americas/
10/28/2026

01:00 PM

10/28/2026

EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
11/04/2026

11:00 AM

11/04/2026

Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions

https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
11/05/2026

02:00 PM

11/05/2026

Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption

https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
11/10/2026

01:00 PM

11/10/2026

Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service

https://www.truthinit.com/index.php/channel/2191/zendesk-from-ai-readiness-to-results-a-framework-for-transforming-it-service/
11/10/2026

01:00 PM

11/10/2026

Agentic Shopping and Muse: Insights for the 2026 Holiday Season

https://www.truthinit.com/index.php/channel/2219/agentic-shopping-and-muse-insights-for-the-2026-holiday-season/
11/12/2026

01:00 PM

11/12/2026

Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
11/19/2026

01:00 PM

11/19/2026

Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
11/19/2026

01:00 PM

11/19/2026

Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
01/19/2027

02:00 PM

01/19/2027

HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/