Integrating SailPoint with Auth0
Auth0 is used as a platform to add identity and access management to applications, allowing developers to handle user authentication and authorization without building the complex infrastructure themselves. It supports features such as Single Sign-On (SSO), Passwordless Login, Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) for managing user permissions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Auth0 connector supports the following:
Account Management
- Aggregate Accounts
Entitlement Management
- Aggregate group (roles)
- Aggregate organization
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before configuring the connector, ensure the following setup is completed in Auth0:
- Auth0 Tenant You must have administrator access to your Auth0 dashboard.
- Auth0 Management API Enabled
- Navigate to Applications → APIs → Auth0 Management API.
- Authorize your application with the required scopes.
- Application Created in Auth0
- Create a Machine-to-Machine Application based on your integration requirements.
- Make sure to note the following details:
- Client ID
- Client Secret
- Domain (Tenant URL, for example:
https://dev-org-sp.us.auth0.com)
- API Permissions
- Go to Applications → APIs → Auth0 Management API → Authorized Applications.
- Toggle Authorized, open the dropdown, and select All Permissions.
- Click Update, then Generate Access Token.
- (Optional) Refer to the Auth0 Management API documentation for additional guidance.
Required Permissions
| Operation | Permissions |
|---|---|
| Read Users | read:users |
| Create/Update Users | create:users, update:users |
| Delete Users | delete:users |
| Read Roles | read:roles |
| Assign/ Unassign Roles | update:users |
| Read Permissions | read:permissions |
Recommendation: For a smoother setup experience, select all permissions for the Auth0 Management API during testing.