# Auth0 Integration

The new Auth0 integration in Rezonate enhances visibility into identity and access structures, bringing in-depth insights into user configurations, roles, and permissions to bolster security management. By integrating data on configured applications, associated APIs, tenant settings, and user authentication controls, this solution allows for a comprehensive understanding of access points and organizational assignments.\
\
Integrating with Auth0 can give Rezonate visibility into identities, privileges, and tenant settings. These data points are then used to detect security gaps and to extend your identity-centric with auth0 identity information. The integration only reads data and has no writing capabilities.

### Information & Values

As part of the integration, Rezonate is analyzing the following data points:

1. Users, configurations, and associated roles and permissions.
2. Roles & Definitions
3. Organizations and assignments (if applied)
4. Configured Applications & Associated APIs
5. Connections Informaiton
6. Tenant Settings & User Authentication Security Controls&#x20;

<figure><img src="/files/frWf6bdUVERa4BljrEsY" alt=""><figcaption><p>Example from Auth0 Role, Identity Storyline, Rezonate</p></figcaption></figure>

***

## Integration Steps

### Creating a Service Account In Auth0

1. Browse to the Auth0 management console, and Create a new Application

<figure><img src="/files/aur1IqVChM6bMYkxOkYj" alt=""><figcaption></figcaption></figure>

2. Select Machine to Machine

<figure><img src="/files/onRz6hLSxDJRhH6Gxeyl" alt="" width="563"><figcaption></figcaption></figure>

3. Select **Auth0 Management API**

<figure><img src="/files/rRoJYCeqKGsUPFwOFGHv" alt=""><figcaption></figcaption></figure>

3. Select the following permissions

| Scope                            |
| -------------------------------- |
| read:users                       |
| read:client\_grants              |
| read:users\_app\_metadata        |
| read:clients                     |
| read:connections                 |
| read:resource\_servers           |
| read:rules                       |
| read:rules\_configs              |
| read:hooks                       |
| read:actions                     |
| read:email\_provider             |
| read:stats                       |
| read:insights                    |
| read:tenant\_settings            |
| read:logs                        |
| read:logs\_users                 |
| read:shields                     |
| read:anomaly\_blocks             |
| read:triggers                    |
| read:guardian\_enrollments       |
| read:custom\_domains             |
| read:email\_templates            |
| read:mfa\_policies               |
| read:roles                       |
| read:prompts                     |
| read:branding                    |
| read:entitlements                |
| read:organizations\_summary      |
| read:authentication\_methods     |
| read:organizations               |
| read:organization\_members       |
| read:organization\_connections   |
| read:organization\_member\_roles |
| read:organization\_invitations   |
| read:scim\_config                |
| read:phone\_providers            |
| read:sessions                    |
| read:self\_service\_profiles     |
| read:forms                       |
| read:flows                       |

Take Note of the **Domain**, **Client** **ID**, and **Client** **Secret** from the basic information.&#x20;

<figure><img src="/files/31MCzcFbfQbx2as3uxvv" alt=""><figcaption></figcaption></figure>

### Integrating In Rezonate

In the integrations page, select Auth0 and fill in the recently noted Auth0 Domain, ClientID, and Client Secret.

<figure><img src="/files/gwvDf4No2BqyIiwzgz5n" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://kb.rezonate.io/core-integrations/auth0-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
