# Integrating SailPoint with Auth0

Auth0 is used as a platform to add identity and access management to applications, allowing developers to handle user authentication and authorization without building the complex infrastructure themselves. It supports features such as Single Sign-On (SSO), Passwordless Login, Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) for managing user permissions.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Auth0 connector supports the following:

### Account Management

- Aggregate Accounts

### Entitlement Management

- Aggregate group (roles)
- Aggregate organization

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Before configuring the connector, ensure the following setup is completed in Auth0:

1. Auth0 Tenant You must have administrator access to your Auth0 dashboard.
2. Auth0 Management API Enabled

   - Navigate to Applications → APIs → Auth0 Management API.
   - Authorize your application with the required scopes.
3. Application Created in Auth0

   - Create a Machine-to-Machine Application based on your integration requirements.
   - Make sure to note the following details:

     - Client ID
     - Client Secret
     - Domain (Tenant URL, for example: `https://dev-org-sp.us.auth0.com`)
4. API Permissions

   - Go to Applications → APIs → Auth0 Management API → Authorized Applications.
   - Toggle Authorized, open the dropdown, and select All Permissions.
   - Click Update, then Generate Access Token.
5. (Optional) Refer to the [Auth0 Management API documentation](<https://auth0.com/docs/api/management/v2?utm_source=chatgpt.com>) for additional guidance.

## Required Permissions

| Operation | Permissions |
| --- | --- |
| Read Users | `read:users` |
| Create/Update Users | `create:users, update:users` |
| Delete Users | `delete:users` |
| Read Roles | `read:roles` |
| Assign/ Unassign Roles | `update:users` |
| Read Permissions | `read:permissions` |

Recommendation: For a smoother setup experience, select all permissions for the Auth0 Management API during testing.