Replace Auth0 Rules with Auth0 Actions

main/config/navigation/authenticate.json

@@ -161,7 +161,7 @@
             "docs/authenticate/passwordless/passwordless-with-universal-login",
             "docs/authenticate/passwordless/passwordless-connection-limitations",
             "docs/authenticate/passwordless/best-practices",
-            "docs/authenticate/passwordless/sample-use-cases-rules"
+            "docs/authenticate/passwordless/sample-use-cases-actions"
           ]
         },
         {

main/config/redirects.json

@@ -15421,11 +15421,15 @@
   },
   {
     "source": "/docs/connections/passwordless/sample-use-cases-rules",
-    "destination": "/docs/authenticate/passwordless/sample-use-cases-rules"
+    "destination": "/docs/authenticate/passwordless/sample-use-cases-actions"
   },
   {
     "source": "/docs/connections/passwordless/concepts/sample-use-cases-rules",
-    "destination": "/docs/authenticate/passwordless/sample-use-cases-rules"
+    "destination": "/docs/authenticate/passwordless/sample-use-cases-actions"
+  },
+  {
+    "source": "/docs/authenticate/passwordless/sample-use-cases-rules",
+    "destination": "/docs/authenticate/passwordless/sample-use-cases-actions"
   },
   {
     "source": "/docs/connections/social/line",

main/docs/authenticate/passwordless/sample-use-cases-actions.mdx

@@ -0,0 +1,41 @@
+---
+description: Explore examples using Actions with passwordless connections.
+title: Sample Use Cases - Actions with Passwordless Authentication
+---
+
+With [Actions](/docs/customize/actions/actions-overview), you can handle more complicated cases than is possible with [passwordless connections](/docs/authenticate/passwordless) alone. For instance, you can add extra precautions to further ensure possession of an email address or device.
+
+## Require Multi-factor Authentication for users who are outside the corporate network
+
+Let's say you want to require [multi-factor authentication (MFA)](/docs/secure/multi-factor-authentication) for any users who are accessing the application using a <Tooltip tip="Passwordless: Form of authentication that does not rely on a password as the first factor." cta="View Glossary" href="/docs/glossary?term=passwordless">passwordless</Tooltip> connection from outside your corporate network.
+
+Using an Action, you can check whether a user is authenticating using a passwordless method (`sms`, `email`) and if their session IP falls outside of the designated corporate network, prompt them for a second authentication factor.
+
+<Callout icon="file-lines" color="#0EA5E9" iconType="regular">
+
+You could also trigger this Action based on other criteria, such as whether the current IP matches the user's IP allowlist or whether geolocating the user reveals they are in a different country from the one listed in their user profile.
+
+</Callout>
+
+To do this, [create a Post-Login Action](/docs/customize/actions/write-your-first-action) with the following code. Before deploying, add `ipaddr.js` as an npm dependency in the Action editor.
+
+```javascript lines
+const ipaddr = require('ipaddr.js');
+
+exports.onExecutePostLogin = async (event, api) => {
+  const corp_network = "192.168.1.134/26";
+  const current_ip = ipaddr.parse(event.request.ip);
+  // is auth method passwordless and IP outside corp network?
+  const passwordlessOutside = event.authentication.methods.find(
+    (method) => (
+      ((method.name === 'sms') || (method.name === 'email')) &&
+      (!current_ip.match(ipaddr.parseCIDR(corp_network)))
+    )
+  );
+
+  // if yes, then require MFA
+  if (passwordlessOutside) {
+    api.multifactor.enable('any', { allowRememberBrowser: false });
+  }
+};
+```