Auth0 Email Template Redirects to Default Error Page 5 Days After URL Expiration

Auth0 routes users to the default Auth0 error page instead of the configured Redirect To URL when they click an email template link five days after the URL Lifetime expires.

• Auth0
• Email Templates
• Redirect To URL
• URL Lifetime

Auth0 retains the custom redirect context for 5 days after the configured URL Lifetime expires. Once this 5-day period passes, Auth0 drops the custom redirect configuration and defaults to the standard Auth0 error page. Administrators cannot customize this global five-day threshold for individual tenants.

How does the Redirect To URL behave after the URL Lifetime expires?

Review the following example using the Blocked Account Email template to understand how the redirect behavior changes based on when the user clicks the Unblock link when the Redirect To URL is set to https://example.com.

1. Click Unblock Link (First click, within Lifetime)
   • Resulting URL: https://example.com/?title=Account%20Unblocked&success=true&message=Your%20account%20has%20been%20unblocked
   • Behavior: Auth0 redirects to the specified Redirect To URL.
2. Click Unblock Link again (After unblocked, within Lifetime)
   • Resulting URL: https://example.com/?title=Authentication%20Error&message=This%20URL%20can%20be%20used%20only%20once&success=false
   • Behavior: Auth0 redirects to the specified Redirect To URL.
3. Click Unblock Link again (Expired, up to ~5 days after expiration)
   • Resulting URL: https://example.com/?title=Authentication%20Error&message=Access%20expired.&success=false
   • Behavior: Auth0 redirects to the specified Redirect To URL.
4. Click Unblock Link again (Expired, 5+ days after expiration)
   • Resulting URL: https://<tenantDomain>/u/brute-force-protection-unblock?ticket=<ticketNumber>
   • Behavior: Instead of redirecting to the configured Redirect To URL (https://example.com), Auth0 routes the user to the default Auth0 Authentication Error page hosted on the tenant domain.