Auth0

Before you start#

• You need admin access to your Auth0 tenant.
• Vectis support completes the configuration on the Vectis side, so be ready to send them the details below.

Step 1: Create an application#

1. Create a Regular Web Application

   In the Auth0 Dashboard, go to Applications → Create Application and select Regular Web Applications.

2. Configure Settings

   Set:

   • Allowed Callback URLs: https://<your Vectis address>/sso/callback
   • Allowed Logout URLs: https://<your Vectis address>/login

3. Note the credentials

   Note the Domain, Client ID and Client Secret.

Step 2: Send the details to Vectis#

Send Vectis support:

• Client ID and Client Secret from step 1.
• Issuer URL: https://your-tenant.auth0.com
• Domain: your organisation's email domain.

Step 3: Configure group claims (optional)#

To include user roles or groups in the ID token:

1. In Auth0, go to Actions → Flows → Login.

2. Add a custom action:

   jsCopy

   exports.onExecutePostLogin = async (event, api) => {
     if (event.authorization) {
       api.idToken.setCustomClaim("groups", event.authorization.roles);
     }
   };

3. Deploy the action.

Notes#

• The Auth0 discovery endpoint is https://your-tenant.auth0.com/.well-known/openid-configuration.
• SCIM provisioning needs the Auth0 Enterprise plan and the SCIM extension.