---
title: "Auth0"
slug: "auth0"
updated: 2024-04-01T17:46:36Z
published: 2024-04-01T17:46:36Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safe.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth0

## About this document

---

This document gives you the step-by-step procedure to configure Auth0 in SAFE.

## Introduction

SAFE integrates with Auth0, and fetches the security misconfiguration of the Auth0 account in SAFE.

## Pre-requisite

---

- Access required in **SAFE**:
  - SAFE Admin Access
- Access required in **Auth0:**
  - Auth0 Admin Access
- Required User Inputs:
  - API Identifier
  - Client ID
  - Client Secret
  - API Audience
  - Asset Name in SAFE (optional)
- Required Scope:
  - read:attack_protection
  - read:mfa_policies
  - read:stats

## Generate Connection Details

---

- How to generate **Client ID**and**Client Secret**
  - Log in to your Auth0 account as **Admin**.
  - Click on the **Applications**on the left panel
  - Click on the **Applications**
  - Click on the **Create Application**

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/1(14).png)
  - Enter Name and Select **Machine to Machine Applications**
  - Click on the **Create** button

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/2(13).png)
  - Select the**Auth0 Management API** from the dropdown
  - Select the following permissions:
    - read:attack_protection
    - read:mfa_policies
    - read:stats
  - Click on the **Authorize** button

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/3(12).png)
  - Click on the credentials
  - The system displays the **Client ID**and**Client Secret**. **Copy** and **save** the **Client ID** and **Client Secret** to use it while configuring Auth0 in SAFE.
  - It's important to regularly update the Client ID and Client Secret in SAFE according to its expiration date.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/4(10).png)
- How to generate **API Audience**
  - Log in to your Auth0 account as **Admin**.
  - Click on the **Applications**on the left panel.
  - Click on the **APIs.**
  - The system displays the **API Audience**. **Copy** and **save** the API Audience to use it while configuring Auth0 in SAFE.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/5(12).png)
- How to generate **API Identifier**
  - Log in to your Auth0 account as **Admin**.
  - Click on the **Applications**on the left panel.
  - Click on the **APIs.**
  - Select **Auth0 Management API**

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/6(12).png)
  - The system displays the **API Identifier**. **Copy** and **save** the API Identifier to use it while configuring Auth0 in SAFE.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/7(10).png)

## Configure Auth0 in SAFE

---

- Log in to your SAFE account as **Admin**.
- Click on the **Integrations**option from the left navigation.
- Scroll to find the Auth0 integration card or search for Auth0 in the search bar.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/8(12).png)
- Hover over the **Auth0** integration card and click on the **Configure** button.
- Enter the****following:
  - API Identifier
  - Client ID
  - Client Secret
  - API Audience
  - Asset Name in SAFE - Provide a unique identifier which can uniquely identify the asset
- Enter the **Auto Sync Frequency**.
- Click on the **Test Connection** button.
- Once the connection is successful, click on the **Save** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/9(12).png)
- Once the configuration is saved successfully, click on the **Sync** **Now** button to trigger an on-demand sync.
- Upon a successful sync, the system pulls the Auth0 assets and their findings in SAFE. You can track the status of the sync in the **History** table.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/10(11).png)

## View Results

---

- Go to the integration homepage
- Scroll to find the Auth0 integration card or search for Auth0 in the search bar.
- Click on the Auth0 integration card for **Finding View** and **Asset View**.
  - **Finding View:** This tab displays all the findings details pulled from Auth0.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/11(9).png)
  - **Asset View:**This tab displays all the assets pulled from Auth0.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/12(9).png)

## **History**

---

[](https://portal.document360.io/safe-4/docs/integration-history)Learn More about Integration History [here](/safe-4/docs/integration-history).

## **SAFE's Outgoing IP Addresses**

---

[](https://portal.document360.io/safe-4/docs/safes-outgoing-ip-addresses) Click [here](/safe-4/docs/safes-outgoing-ip-addresses) to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.