Role-based access with auth0 as successor of Netlify Identity

[clarnx]

Hi @markdumay

@markdumay

After some digging, it appears the most reliable, easily managed way to restrict access to a static site is to use role-based access control with JWT. However, it appears anything beyond Netlify Identity requires an Enterprise Plan. This is not a very attractive upgrade path

You are correct that, according to the current documentation, using role-based access control (RBAC) with external JWT providers like Auth0 or Okta is only available on Netlify’s Enterprise plan.

Are there any plans to support auth0 (or similar provider) on the Free Tier and/or Pro Tier too? Or is there an alternative solution that I’ve missed?

Currently, the recommended approach is to use Auth0 for the now-deprecated Netlify Identity.

As for alternatives, the following options are available on other accounts that are not Enterprise:

• Password Protection: You can protect your entire site or specific deploys with a password, either with a basic password or by requiring Netlify team login.
  This is less flexible than RBAC but is available on Pro plans and above
  Learn more: Require password or login credentials.

• Basic Authentication with Custom HTTP Headers: Allows you to protect specific paths with multiple username/password pairs, but does not provide role-based access
  Learn more: Access control options for your Netlify sites.

Hopefully, the above helps.