Introduction

This document gives you the step-by-step procedure to configure Auth0 in SAFE.

SAFE integrates with Auth0, and fetches the security misconfiguration of the Auth0 account in SAFE.

Prerequisites

• Access required in SAFE:

  • SAFE Admin Access

• Access required in Auth0:

  • Auth0 Admin Access

• Required User Inputs:

  • API Identifier

  • Client ID

  • Client Secret

  • API Audience

  • Asset Name in SAFE (optional)

• Required Scope:

  • read:attack_protection

  • read:mfa_policies

  • read:stats

Generate Connection Details

• How to generate Client ID and Client Secret

  • Log in to your Auth0 account as Admin.

  • Click on the Applications on the left panel

  • Click on the Applications

  • Click on the Create Application

• • Enter Name and Select Machine to Machine Applications

  • Click on the Create button

• • Select the Auth0 Management API from the dropdown

  • Select the following permissions:

    • read:attack_protection

    • read:mfa_policies

    • read:stats

  
  
  • 
    

    Click on the Authorize button

  
  

• • Click on the credentials

  • The system displays the Client ID and Client Secret. Copy and save the Client ID and Client Secret to use it while configuring Auth0 in SAFE.

  • It's important to regularly update the Client ID and Client Secret in SAFE according to its expiration date.

• How to generate API Audience

  • Log in to your Auth0 account as Admin.

  • Click on the Applications on the left panel.

  • Click on the APIs.

  • The system displays the API Audience. Copy and save the API Audience to use it while configuring Auth0 in SAFE.

• How to generate API Identifier

  • Log in to your Auth0 account as Admin.

  • Click on the Applications on the left panel.

  • Click on the APIs.

  • Select Auth0 Management API

• • The system displays the API Identifier. Copy and save the API Identifier to use it while configuring Auth0 in SAFE.

Configure Auth0 in SAFE

• Log in to your SAFE account as Admin.

• Click on the Integrations option from the left navigation.

• Scroll to find the Auth0 integration card or search for Auth0 in the search bar.

• Hover over the Auth0 integration card and click on the Configure button.

• Enter the following:

  • API Identifier

  • Client ID

  • Client Secret

  • API Audience

  • Asset Name in SAFE - Provide a unique identifier which can uniquely identify the asset




• Enter the Auto Sync Frequency.




• Click on the Test Connection button.



• 
  

  Once the connection is successful, click on the Save button.

• Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

• Upon a successful sync, the system pulls the Auth0 assets and their findings in SAFE. You can track the status of the sync in the History table.

View Results

• Go to the integration homepage

• Scroll to find the Auth0 integration card or search for Auth0 in the search bar.

• Click on the Auth0 integration card for Finding View and Asset View.

  • Finding View: This tab displays all the findings details pulled from Auth0.

• • Asset View: This tab displays all the assets pulled from Auth0.

To check sync status and errors for this integration, see Integration History.

Did this article help?

Let us know by leaving a star rating at the top of this article.