# Auth0 Integration

The new Auth0 integration in Rezonate enhances visibility into identity and access structures, bringing in-depth insights into user configurations, roles, and permissions to bolster security management. By integrating data on configured applications, associated APIs, tenant settings, and user authentication controls, this solution allows for a comprehensive understanding of access points and organizational assignments.\
\
Integrating with Auth0 can give Rezonate visibility into identities, privileges, and tenant settings. These data points are then used to detect security gaps and to extend your identity-centric with auth0 identity information. The integration only reads data and has no writing capabilities.

### Information & Values

As part of the integration, Rezonate is analyzing the following data points:

1. Users, configurations, and associated roles and permissions.
2. Roles & Definitions
3. Organizations and assignments (if applied)
4. Configured Applications & Associated APIs
5. Connections Informaiton
6. Tenant Settings & User Authentication Security Controls 

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FMXGymRrxTrwyXMrrHutH%2Fimage.png?alt=media&#x26;token=421edddf-3175-4ee8-b6d9-187fa91d6639" alt=""><figcaption><p>Example from Auth0 Role, Identity Storyline, Rezonate</p></figcaption></figure>

***

## Integration Steps

### Creating a Service Account In Auth0

1. Browse to the Auth0 management console, and Create a new Application

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FlAr3eZOqnQSLSIc5HHD7%2Fimage.png?alt=media&#x26;token=fd8e0e8a-bee5-4e6f-8b70-3516d6a17d02" alt=""><figcaption></figcaption></figure>

2. Select Machine to Machine

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2Fm3FlnABPiJXakgLjy3zE%2Fimage.png?alt=media&#x26;token=64da8f37-0360-4ef3-8a30-05d6fced8c21" alt="" width="563"><figcaption></figcaption></figure>

3. Select **Auth0 Management API**

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FzdTOe7jhveDbW4V4MyIe%2Fimage.png?alt=media&#x26;token=7e6b2f53-08da-485c-885e-410397bf04d4" alt=""><figcaption></figcaption></figure>

3. Select the following permissions

| Scope                            |
| -------------------------------- |
| read:users                       |
| read:client\_grants              |
| read:users\_app\_metadata        |
| read:clients                     |
| read:connections                 |
| read:resource\_servers           |
| read:rules                       |
| read:rules\_configs              |
| read:hooks                       |
| read:actions                     |
| read:email\_provider             |
| read:stats                       |
| read:insights                    |
| read:tenant\_settings            |
| read:logs                        |
| read:logs\_users                 |
| read:shields                     |
| read:anomaly\_blocks             |
| read:triggers                    |
| read:guardian\_enrollments       |
| read:custom\_domains             |
| read:email\_templates            |
| read:mfa\_policies               |
| read:roles                       |
| read:prompts                     |
| read:branding                    |
| read:entitlements                |
| read:organizations\_summary      |
| read:authentication\_methods     |
| read:organizations               |
| read:organization\_members       |
| read:organization\_connections   |
| read:organization\_member\_roles |
| read:organization\_invitations   |
| read:scim\_config                |
| read:phone\_providers            |
| read:sessions                    |
| read:self\_service\_profiles     |
| read:forms                       |
| read:flows                       |

Take Note of the **Domain**, **Client** **ID**, and **Client** **Secret** from the basic information.&#x20;

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FP8ViBvf5mHxcLPgdYvf3%2Fimage.png?alt=media&#x26;token=f1563c86-2316-4db3-9153-8688756a8ea3" alt=""><figcaption></figcaption></figure>

### Integrating In Rezonate

In the integrations page, select Auth0 and fill in the recently noted Auth0 Domain, ClientID, and Client Secret.

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2F0iZk6tfcLt2NrszEgnOl%2Fimage.png?alt=media&#x26;token=5312535d-6c4b-44be-9407-a06f8bd173cc" alt=""><figcaption></figcaption></figure>