Authentication & Security

PeakCommerce secures every sign-in through Auth0 as its identity provider, then governs what each signed-in person can see and do through roles and profiles. Authentication answers who are you?; roles and profiles answer what are you allowed to do? — keeping the two separate is what lets you adopt enterprise SSO without re-modelling permissions.

• Sign-in runs on Auth0 Universal Login — staff (Admins and CSRs) and customers alike. Social and enterprise SSO are supported.

• Password and MFA policy are enforced by Auth0, or by your own identity provider when you bring one.

• End customers can be signed into the customer portal automatically from your own app via SSO (operator-configured).

• Administrative changes are recorded in the audit log (Settings → Audit Logs).

Explore this section:

• Single Sign-On for PeakCommerce Sites

• Login Pages

• What Your Web Team Needs for SSO

• Session Management

• Password Policies

• Viewing Audit Logs

• Security and Data Protection — how PeakCommerce protects your data and connected systems