{"text_format":"2","workbook":"xlsx","n_sheets":1,"sheets":["Deploy"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Deploy","index":0,"n_rows":31,"n_cols":5,"rows_kept":31,"cut":false,"hidden":false,"merged":[[1,0,1,4],[14,0,14,4],[17,0,17,4],[23,0,23,4],[25,0,25,4],[27,0,27,4]]}
["#","Item","Guidance","Completed (or NA)","Notes"]
[{"$f":"HYPERLINK(\"https://auth0.com/docs/architecture-scenarios\",\"Architecture\")","v":"Architecture"}]
["DEC10","Tenant administrators defined\nProvision tenant administrators",{"$f":"HYPERLINK(\"https://auth0.com/docs/dashboard/manage-dashboard-admins\",\"Manage Tenant Administrators in the Dashboard\")","v":"Manage Tenant Administrators in the Dashboard"}]
["DEC15","Tenant administration delegation defined\nProvision delegated tenant administrator (not applicable if you’re not using tenant Delegated Administration)","Manage Tenant Administrators in the Dashboard"]
["DEC17","MFA for tenant administrators enabled\nEnroll tenant administrators for MFA (Multi-factor Authentication) ",{"$f":"HYPERLINK(\"https://auth0.com/docs/dashboard/manage-dashboard-admins#enrolling-in-multi-factor-authentication\",\"Enrolling in Multi-factor Authentication\")","v":"Enrolling in Multi-factor Authentication"}]
["DEC20","Support URL configured\nConfigure the URL for your company/organization support page and as a best practice for your production tenant deployment",{"$f":"HYPERLINK(\"https://auth0.com/docs/dashboard/dashboard-tenant-settings#settings\",\"Tenant Settings in the Dashboard\")","v":"Tenant Settings in the Dashboard"}]
["DEC25","Support email configured\nConfigure the email address used to contact your company/organization support team and as a best practice for your production tenant deployment","Tenant Settings in the Dashboard"]
["DEC30","Session lifetime limits for SSO configured\nConfigure session lifetime limits for SSO",{"$f":"HYPERLINK(\"https://auth0.com/docs/sso/current/configure-session-lifetime-limits\",\"Configure Session Lifetime Limits for Single Sign On\")","v":"Configure Session Lifetime Limits for Single Sign On"}]
["DEC40","Tenant wide allowed logout URLs defined\nSpecify logout redirect URLs and not defined as localhost (not mandatory but recommended)",{"$f":"HYPERLINK(\"https://auth0.com/docs/logout#redirect-users-after-logout\",\"Redirect Users After Logout\")","v":"Redirect Users After Logout"}]
["DEC50","Tenant environment tag assigned\nAssign environment tag for each tenant",{"$f":"HYPERLINK(\"https://auth0.com/docs/dev-lifecycle/setting-up-env#set-the-environment\",\"Set the Environment\")","v":"Set the Environment"}]
["DEC55","Tenant production checks run\nRun automated tests on production tenant configuration and address any issues raised (also applicable for non-production tenants)",{"$f":"HYPERLINK(\"https://auth0.com/docs/pre-deployment/how-to-run-test\",\"How to Run the Production Checks\")","v":"How to Run the Production Checks"}]
["DEC57","Tenant production checks best practice aligned\nAlign production tenant checks with best practices (also applicable for non-production tenants)",{"$f":"HYPERLINK(\"https://auth0.com/docs/pre-deployment/tests/best-practice\",\"Production Checks: Best Practices\")","v":"Production Checks: Best Practices"}]
["DEC60","Anomaly detection enabled\nProtect against brute force attacks and use of breached passwords",{"$f":"HYPERLINK(\"https://auth0.com/docs/anomaly-detection/guides/set-anomaly-detection-preferences\",\"Set Anomaly Detection Preferences\")","v":"Set Anomaly Detection Preferences"}]
["DEC70","Install Auth0 Extensions\nInstall desired extensions into each tenant",{"$f":"HYPERLINK(\"https://auth0.com/docs/extensions\",\"Extensions\")","v":"Extensions"}]
[{"$f":"HYPERLINK(\"https://auth0.com/docs/users\",\"User Provisioning\")","v":"User Provisioning"}]
["DEC100","Review user signup policy for database connections\nDisable user signup where not required (not applicable if your are not using Auth0 database connections)",{"$f":"HYPERLINK(\"https://auth0.com/docs/best-practices/connection-settings#disable-user-signup-if-it-s-not-appropriate-for-each-database-connection\",\"Disable user signup if it's not appropriate for each database connection\")","v":"Disable user signup if it's not appropriate for each database connection"}]
["DEC110","Set password policy for database connections\nSetup recommended password policy for database connections (not applicable if you are not using Auth0 database connections)",{"$f":"HYPERLINK(\"https://auth0.com/docs/best-practices/connection-settings#set-password-policy-for-database-connections\",\"Set password policy for database connections\")","v":"Set password policy for database connections"}]
[{"$f":"HYPERLINK(\"https://auth0.com/docs/application-auth/current\",\"User Authentication\")","v":"User Authentication"}]
["DEC200","Allow callback URLs defined\nSpecify redirect URLs not defined as localhost.",{"$f":"HYPERLINK(\"https://auth0.com/docs/users/guides/redirect-users-after-login\",\"Redirect Users After Login\")","v":"Redirect Users After Login"}]
["DEC210","Application grant types aligned\nDisable grant types not required or recommended in your application (not applicable if you are not using OIDC or OAuth2 workflows)",{"$f":"HYPERLINK(\"https://auth0.com/docs/applications/reference/grant-types-available\",\"Available Grant Types\")","v":"Available Grant Types"}]
["DEC220","Social connection developer keys replaced\nComplete registration for each social identity provider to mitigate limitations of out-of-box Auth0 Developer Keys (not applicable if you are not using social connections)",{"$f":"HYPERLINK(\"https://auth0.com/docs/connections/social/devkeys\",\"Test Social Connections with Auth0 Developer Keys\")","v":"Test Social Connections with Auth0 Developer Keys"}]
["DEC225","Social connection identity data reviewed\nReview data being requested from each social connection (not applicable if you are not using social connections)",{"$f":"HYPERLINK(\"https://auth0.com/docs/best-practices/connection-settings#review-requested-data\",\"Review requested data\")","v":"Review requested data"}]
["DEC230","RSA-SHA256 used as signature algorithm\nConfigure SAML connections to sign requests and use RSA-SHA256 (not applicable if you are not using SAML)",{"$f":"HYPERLINK(\"https://auth0.com/docs/best-practices/connection-settings#use-rsa-sha256-for-saml-connections\",\"Use RSA-SHA256 for SAML connections\")","v":"Use RSA-SHA256 for SAML connections"}]
[{"$f":"HYPERLINK(\"https://auth0.com/docs/users/concepts/overview-user-profile\",\"User Profile Management\")","v":"User Profile Management"}]
["DEC400","Set password policy for database connections\nSetup recommened password policy for database connections (not applicable if you are not using Auth0 database connections)",{"$f":"HYPERLINK(\"https://auth0.com/docs/best-practices/connection-settings#set-password-policy-for-database-connections\",\"Set password policy for database connections\")","v":"Set password policy for database connections"}]
[{"$f":"HYPERLINK(\"https://auth0.com/docs/logout\",\"User Logout\")","v":"User Logout"}]
["DEC500","Allowed logout URLs defined\nSpecify logout redirect URLs and not defined as localhost (not mandatory but recommended)",{"$f":"HYPERLINK(\"https://auth0.com/docs/logout#redirect-users-after-logout\",\"Redirect users after logout\")","v":"Redirect users after logout"}]
["Deployment Automation"]
["DEC800","Integration test for Rules\nFor custom Rule extensibility, execute integration test(s) prior to automated deployment (also applicable if you are not using CI/CD pipeline, though not required if you are not using Rule extensibility)",{"$f":"HYPERLINK(\"https://community.auth0.com/t/how-to-unit-test-rules-as-part-of-ci-cd-pipeline/22424\",\"How to unit test rules as part of CI/CD pipeline\")","v":"How to unit test rules as part of CI/CD pipeline"}]
["DEC810","Integration test for Hooks\nFor custom Hook extensibility, execute integration test(s) prior to automated deployment (also applicable if you are not using a CI/CD pipeline, though not required if you are not using Hook extensibility)",{"$f":"HYPERLINK(\"https://auth0.com/docs/hooks\",\"Hooks\")","v":"Hooks"}]
["DEC820","Integration test for custom database scripts\nExecute integration test(s) when authenticating users using your own database or automatically migrating users prior to automated deployment (also applicable if you are not using a CI/CD pipeline, through not required if you have not implemented custom database scripts)",{"$f":"HYPERLINK(\"https://auth0.com/docs/connections/database/custom-db/error-handling\",\"Custom Database Error Handling and Troubleshooting\")","v":"Custom Database Error Handling and Troubleshooting"}]