> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.generaltranslation.app/llms.txt
> Use this file to discover all available pages before exploring further.

> Checks to ensure that your Applications comply with Auth0 best practices

# Production Readiness Checks: Best Practices

The following checks cannot be automated, so we recommend manually checking these areas prior to deployment to Production.

<table class="table">
  <thead>
    <tr>
      <th>Check</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>Externalize <a href="/docs/authenticate/database-connections/custom-db">Configuration Parameters</a></td>
      <td><a href="https://manage.auth0.com/#/connections/database">Externalize, instead of hard code, all configuration parameters</a>, such as credentials, connection strings, API keys, and so on, when developing Rules, Hooks, or custom database connections.</td>
    </tr>

    <tr>
      <td>Review the <Tooltip tip="Service that, after a user logs into one applicaton, automatically logs that user in to other applications." cta="View Glossary" href="/docs/glossary?term=Single+Sign-on+%28SSO%29">Single Sign-on (SSO)</Tooltip> Timeout Values</td>
      <td>Review the default <a href="https://manage.auth0.com/#/account/advanced">SSO cookie timeout values</a> and ensure they align with your requirements.</td>
    </tr>

    <tr>
      <td>Tenants and Administrators</td>
      <td>Review all tenants and tenant administrators to ensure they are correct. Decommission tenants that are no longer in use. Ensure that tenant administrators are limited to the necessary users.</td>
    </tr>

    <tr>
      <td>Verify Client IDs in App Code</td>
      <td>Ensure that the Client IDs in your application code align with their Auth0 Application configurations.</td>
    </tr>

    <tr>
      <td>Add Auth0 Public IPs to Allowlist</td>
      <td>Allowlist Auth0 IPs if you're connecting to internal services or services behind a firewall when using Rules, Hooks, or custom databases. You can get a list of IP addresses in the tool tip when configuring any of these items.</td>
    </tr>

    <tr>
      <td>Review Attack Protection</td>
      <td>It is recommended that you <a href="/docs/secure/attack-protection">review Auth0 Protection capability and configuration</a>.</td>
    </tr>
  </tbody>
</table>

## Learn more

* [Production Readiness Checks: Critical Fixes](/docs/deploy-monitor/pre-deployment-checks/production-check-required-fixes)
* [Production Readiness Checks: Non-Critical Fixes](/docs/deploy-monitor/pre-deployment-checks/production-check-recommended-fixes)
* [Get Management API Access Tokens for Production](/docs/secure/tokens/access-tokens/management-api-access-tokens/get-management-api-access-tokens-for-production)