Client
With this resource, you can set up applications that use Auth0 for authentication and configure allowed callback URLs and secrets for these applications. Depending on your plan, you may also configure add-ons to allow your application to call another application’s API (such as Firebase and AWS) on behalf of an authenticated user.
Example Usage
using Pulumi;
using Auth0 = Pulumi.Auth0;
class MyStack : Stack
{
public MyStack()
{
var myClient = new Auth0.Client("myClient", new Auth0.ClientArgs
{
Addons = new Auth0.Inputs.ClientAddonsArgs
{
Firebase =
{
{ "client_email", "john.doe@example.com" },
{ "lifetime_in_seconds", 1 },
{ "private_key", "wer" },
{ "private_key_id", "qwreerwerwe" },
},
Samlp = new Auth0.Inputs.ClientAddonsSamlpArgs
{
Audience = "https://example.com/saml",
CreateUpnClaim = false,
MapIdentities = false,
MapUnknownClaimsAsIs = false,
Mappings =
{
{ "email", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" },
{ "name", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" },
},
NameIdentifierFormat = "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
NameIdentifierProbes =
{
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
},
PassthroughClaimsWithNoMapping = false,
},
},
AllowedLogoutUrls =
{
"https://example.com",
},
AllowedOrigins =
{
"https://example.com",
},
AppType = "non_interactive",
Callbacks =
{
"https://example.com/callback",
},
ClientMetadata =
{
{ "foo", "zoo" },
},
CustomLoginPageOn = true,
Description = "Test Applications Long Description",
GrantTypes =
{
"authorization_code",
"http://auth0.com/oauth/grant-type/password-realm",
"implicit",
"password",
"refresh_token",
},
IsFirstParty = true,
IsTokenEndpointIpHeaderTrusted = true,
JwtConfiguration = new Auth0.Inputs.ClientJwtConfigurationArgs
{
Alg = "RS256",
LifetimeInSeconds = 300,
Scopes =
{
{ "foo", "bar" },
},
SecretEncoded = true,
},
Mobile = new Auth0.Inputs.ClientMobileArgs
{
Ios = new Auth0.Inputs.ClientMobileIosArgs
{
AppBundleIdentifier = "com.my.bundle.id",
TeamId = "9JA89QQLNQ",
},
},
OidcConformant = false,
TokenEndpointAuthMethod = "client_secret_post",
WebOrigins =
{
"https://example.com",
},
});
}
}
Coming soon!
import pulumi
import pulumi_auth0 as auth0
my_client = auth0.Client("myClient",
addons={
"firebase": {
"client_email": "john.doe@example.com",
"lifetime_in_seconds": 1,
"private_key": "wer",
"private_key_id": "qwreerwerwe",
},
"samlp": {
"audience": "https://example.com/saml",
"createUpnClaim": False,
"mapIdentities": False,
"mapUnknownClaimsAsIs": False,
"mappings": {
"email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
"name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
},
"nameIdentifierFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
"nameIdentifierProbes": ["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"],
"passthroughClaimsWithNoMapping": False,
},
},
allowed_logout_urls=["https://example.com"],
allowed_origins=["https://example.com"],
app_type="non_interactive",
callbacks=["https://example.com/callback"],
client_metadata={
"foo": "zoo",
},
custom_login_page_on=True,
description="Test Applications Long Description",
grant_types=[
"authorization_code",
"http://auth0.com/oauth/grant-type/password-realm",
"implicit",
"password",
"refresh_token",
],
is_first_party=True,
is_token_endpoint_ip_header_trusted=True,
jwt_configuration={
"alg": "RS256",
"lifetimeInSeconds": 300,
"scopes": {
"foo": "bar",
},
"secretEncoded": True,
},
mobile={
"ios": {
"appBundleIdentifier": "com.my.bundle.id",
"teamId": "9JA89QQLNQ",
},
},
oidc_conformant=False,
token_endpoint_auth_method="client_secret_post",
web_origins=["https://example.com"])import * as pulumi from "@pulumi/pulumi";
import * as auth0 from "@pulumi/auth0";
const myClient = new auth0.Client("my_client", {
addons: {
firebase: {
client_email: "john.doe@example.com",
lifetime_in_seconds: 1,
private_key: "wer",
private_key_id: "qwreerwerwe",
},
samlp: {
audience: "https://example.com/saml",
createUpnClaim: false,
mapIdentities: false,
mapUnknownClaimsAsIs: false,
mappings: {
email: "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
name: "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
},
nameIdentifierFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
nameIdentifierProbes: ["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"],
passthroughClaimsWithNoMapping: false,
},
},
allowedLogoutUrls: ["https://example.com"],
allowedOrigins: ["https://example.com"],
appType: "non_interactive",
callbacks: ["https://example.com/callback"],
clientMetadata: {
foo: "zoo",
},
customLoginPageOn: true,
description: "Test Applications Long Description",
grantTypes: [
"authorization_code",
"http://auth0.com/oauth/grant-type/password-realm",
"implicit",
"password",
"refresh_token",
],
isFirstParty: true,
isTokenEndpointIpHeaderTrusted: true,
jwtConfiguration: {
alg: "RS256",
lifetimeInSeconds: 300,
scopes: {
foo: "bar",
},
secretEncoded: true,
},
mobile: {
ios: {
appBundleIdentifier: "com.my.bundle.id",
teamId: "9JA89QQLNQ",
},
},
oidcConformant: false,
tokenEndpointAuthMethod: "client_secret_post",
webOrigins: ["https://example.com"],
});Create a Client Resource
new Client(name: string, args?: ClientArgs, opts?: CustomResourceOptions);def Client(resource_name, opts=None, addons=None, allowed_logout_urls=None, allowed_origins=None, app_type=None, callbacks=None, client_metadata=None, client_secret_rotation_trigger=None, cross_origin_auth=None, cross_origin_loc=None, custom_login_page=None, custom_login_page_on=None, custom_login_page_preview=None, description=None, encryption_key=None, form_template=None, grant_types=None, initiate_login_uri=None, is_first_party=None, is_token_endpoint_ip_header_trusted=None, jwt_configuration=None, logo_uri=None, mobile=None, name=None, oidc_conformant=None, sso=None, sso_disabled=None, token_endpoint_auth_method=None, web_origins=None, __props__=None);func NewClient(ctx *Context, name string, args *ClientArgs, opts ...ResourceOption) (*Client, error)public Client(string name, ClientArgs? args = null, CustomResourceOptions? opts = null)- name string
- The unique name of the resource.
- args ClientArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- opts ResourceOptions
- A bag of options that control this resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ClientArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ClientArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
Client Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.
Inputs
The Client resource accepts the following input properties:
- Addons
Client
Addons Args List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- Allowed
Logout List<string>Urls List(String). URLs that Auth0 may redirect to after logout.
- Allowed
Origins List<string> List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- App
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- Callbacks List<string>
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- Client
Metadata Dictionary<string, object> Map(String)
- Client
Secret Dictionary<string, object>Rotation Trigger Map.
- Cross
Origin boolAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- Cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- Custom
Login stringPage String. Content of the custom login page.
- Custom
Login boolPage On Boolean. Indicates whether or not a custom login page is to be used.
- Custom
Login stringPage Preview String.
- Description string
String, (Max length = 140 characters). Description of the purpose of the client.
- Encryption
Key Dictionary<string, string> Map(String).
- Form
Template string String. Form template for WS-Federation protocol.
- Grant
Types List<string> List(String). Types of grants that this client is authorized to use.
- Initiate
Login stringUri - Is
First boolParty Boolean. Indicates whether or not this client is a first-party client.
- Is
Token boolEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- Jwt
Configuration ClientJwt Configuration Args List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- Logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- Mobile
Client
Mobile Args List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- Name string
String. Name of the client.
- Oidc
Conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- Sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- Sso
Disabled bool Boolean. Indicates whether or not SSO is disabled.
- Token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- Web
Origins List<string> List(String). URLs that represent valid web origins for use with web message response mode.
- Addons
Client
Addons List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- Allowed
Logout []stringUrls List(String). URLs that Auth0 may redirect to after logout.
- Allowed
Origins []string List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- App
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- Callbacks []string
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- Client
Metadata map[string]interface{} Map(String)
- Client
Secret map[string]interface{}Rotation Trigger Map.
- Cross
Origin boolAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- Cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- Custom
Login stringPage String. Content of the custom login page.
- Custom
Login boolPage On Boolean. Indicates whether or not a custom login page is to be used.
- Custom
Login stringPage Preview String.
- Description string
String, (Max length = 140 characters). Description of the purpose of the client.
- Encryption
Key map[string]string Map(String).
- Form
Template string String. Form template for WS-Federation protocol.
- Grant
Types []string List(String). Types of grants that this client is authorized to use.
- Initiate
Login stringUri - Is
First boolParty Boolean. Indicates whether or not this client is a first-party client.
- Is
Token boolEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- Jwt
Configuration ClientJwt Configuration List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- Logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- Mobile
Client
Mobile List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- Name string
String. Name of the client.
- Oidc
Conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- Sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- Sso
Disabled bool Boolean. Indicates whether or not SSO is disabled.
- Token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- Web
Origins []string List(String). URLs that represent valid web origins for use with web message response mode.
- addons
Client
Addons List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- allowed
Logout string[]Urls List(String). URLs that Auth0 may redirect to after logout.
- allowed
Origins string[] List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- app
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- callbacks string[]
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- client
Metadata {[key: string]: any} Map(String)
- client
Secret {[key: string]: any}Rotation Trigger Map.
- cross
Origin booleanAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- custom
Login stringPage String. Content of the custom login page.
- custom
Login booleanPage On Boolean. Indicates whether or not a custom login page is to be used.
- custom
Login stringPage Preview String.
- description string
String, (Max length = 140 characters). Description of the purpose of the client.
- encryption
Key {[key: string]: string} Map(String).
- form
Template string String. Form template for WS-Federation protocol.
- grant
Types string[] List(String). Types of grants that this client is authorized to use.
- initiate
Login stringUri - is
First booleanParty Boolean. Indicates whether or not this client is a first-party client.
- is
Token booleanEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- jwt
Configuration ClientJwt Configuration List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- mobile
Client
Mobile List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- name string
String. Name of the client.
- oidc
Conformant boolean Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- sso boolean
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- sso
Disabled boolean Boolean. Indicates whether or not SSO is disabled.
- token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- web
Origins string[] List(String). URLs that represent valid web origins for use with web message response mode.
- addons
Dict[Client
Addons] List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- allowed_
logout_ List[str]urls List(String). URLs that Auth0 may redirect to after logout.
- allowed_
origins List[str] List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- app_
type str String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- callbacks List[str]
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- client_
metadata Dict[str, Any] Map(String)
- client_
secret_ Dict[str, Any]rotation_ trigger Map.
- cross_
origin_ boolauth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- cross_
origin_ strloc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- custom_
login_ strpage String. Content of the custom login page.
- custom_
login_ boolpage_ on Boolean. Indicates whether or not a custom login page is to be used.
- custom_
login_ strpage_ preview String.
- description str
String, (Max length = 140 characters). Description of the purpose of the client.
- encryption_
key Dict[str, str] Map(String).
- form_
template str String. Form template for WS-Federation protocol.
- grant_
types List[str] List(String). Types of grants that this client is authorized to use.
- initiate_
login_ struri - is_
first_ boolparty Boolean. Indicates whether or not this client is a first-party client.
- is_
token_ boolendpoint_ ip_ header_ trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- jwt_
configuration Dict[ClientJwt Configuration] List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- logo_
uri str String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- mobile
Dict[Client
Mobile] List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- name str
String. Name of the client.
- oidc_
conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- sso_
disabled bool Boolean. Indicates whether or not SSO is disabled.
- token_
endpoint_ strauth_ method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- web_
origins List[str] List(String). URLs that represent valid web origins for use with web message response mode.
Outputs
All input properties are implicitly available as output properties. Additionally, the Client resource produces the following output properties:
Look up an Existing Client Resource
Get an existing Client resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ClientState, opts?: CustomResourceOptions): Clientstatic get(resource_name, id, opts=None, addons=None, allowed_logout_urls=None, allowed_origins=None, app_type=None, callbacks=None, client_id=None, client_metadata=None, client_secret=None, client_secret_rotation_trigger=None, cross_origin_auth=None, cross_origin_loc=None, custom_login_page=None, custom_login_page_on=None, custom_login_page_preview=None, description=None, encryption_key=None, form_template=None, grant_types=None, initiate_login_uri=None, is_first_party=None, is_token_endpoint_ip_header_trusted=None, jwt_configuration=None, logo_uri=None, mobile=None, name=None, oidc_conformant=None, sso=None, sso_disabled=None, token_endpoint_auth_method=None, web_origins=None, __props__=None);func GetClient(ctx *Context, name string, id IDInput, state *ClientState, opts ...ResourceOption) (*Client, error)public static Client Get(string name, Input<string> id, ClientState? state, CustomResourceOptions? opts = null)- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
The following state arguments are supported:
- Addons
Client
Addons Args List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- Allowed
Logout List<string>Urls List(String). URLs that Auth0 may redirect to after logout.
- Allowed
Origins List<string> List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- App
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- Callbacks List<string>
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- Client
Id string String. ID of the client.
- Client
Metadata Dictionary<string, object> Map(String)
- Client
Secret string String. Secret for the client; keep this private.
- Client
Secret Dictionary<string, object>Rotation Trigger Map.
- Cross
Origin boolAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- Cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- Custom
Login stringPage String. Content of the custom login page.
- Custom
Login boolPage On Boolean. Indicates whether or not a custom login page is to be used.
- Custom
Login stringPage Preview String.
- Description string
String, (Max length = 140 characters). Description of the purpose of the client.
- Encryption
Key Dictionary<string, string> Map(String).
- Form
Template string String. Form template for WS-Federation protocol.
- Grant
Types List<string> List(String). Types of grants that this client is authorized to use.
- Initiate
Login stringUri - Is
First boolParty Boolean. Indicates whether or not this client is a first-party client.
- Is
Token boolEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- Jwt
Configuration ClientJwt Configuration Args List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- Logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- Mobile
Client
Mobile Args List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- Name string
String. Name of the client.
- Oidc
Conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- Sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- Sso
Disabled bool Boolean. Indicates whether or not SSO is disabled.
- Token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- Web
Origins List<string> List(String). URLs that represent valid web origins for use with web message response mode.
- Addons
Client
Addons List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- Allowed
Logout []stringUrls List(String). URLs that Auth0 may redirect to after logout.
- Allowed
Origins []string List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- App
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- Callbacks []string
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- Client
Id string String. ID of the client.
- Client
Metadata map[string]interface{} Map(String)
- Client
Secret string String. Secret for the client; keep this private.
- Client
Secret map[string]interface{}Rotation Trigger Map.
- Cross
Origin boolAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- Cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- Custom
Login stringPage String. Content of the custom login page.
- Custom
Login boolPage On Boolean. Indicates whether or not a custom login page is to be used.
- Custom
Login stringPage Preview String.
- Description string
String, (Max length = 140 characters). Description of the purpose of the client.
- Encryption
Key map[string]string Map(String).
- Form
Template string String. Form template for WS-Federation protocol.
- Grant
Types []string List(String). Types of grants that this client is authorized to use.
- Initiate
Login stringUri - Is
First boolParty Boolean. Indicates whether or not this client is a first-party client.
- Is
Token boolEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- Jwt
Configuration ClientJwt Configuration List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- Logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- Mobile
Client
Mobile List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- Name string
String. Name of the client.
- Oidc
Conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- Sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- Sso
Disabled bool Boolean. Indicates whether or not SSO is disabled.
- Token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- Web
Origins []string List(String). URLs that represent valid web origins for use with web message response mode.
- addons
Client
Addons List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- allowed
Logout string[]Urls List(String). URLs that Auth0 may redirect to after logout.
- allowed
Origins string[] List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- app
Type string String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- callbacks string[]
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- client
Id string String. ID of the client.
- client
Metadata {[key: string]: any} Map(String)
- client
Secret string String. Secret for the client; keep this private.
- client
Secret {[key: string]: any}Rotation Trigger Map.
- cross
Origin booleanAuth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- cross
Origin stringLoc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- custom
Login stringPage String. Content of the custom login page.
- custom
Login booleanPage On Boolean. Indicates whether or not a custom login page is to be used.
- custom
Login stringPage Preview String.
- description string
String, (Max length = 140 characters). Description of the purpose of the client.
- encryption
Key {[key: string]: string} Map(String).
- form
Template string String. Form template for WS-Federation protocol.
- grant
Types string[] List(String). Types of grants that this client is authorized to use.
- initiate
Login stringUri - is
First booleanParty Boolean. Indicates whether or not this client is a first-party client.
- is
Token booleanEndpoint Ip Header Trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- jwt
Configuration ClientJwt Configuration List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- logo
Uri string String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- mobile
Client
Mobile List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- name string
String. Name of the client.
- oidc
Conformant boolean Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- sso boolean
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- sso
Disabled boolean Boolean. Indicates whether or not SSO is disabled.
- token
Endpoint stringAuth Method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- web
Origins string[] List(String). URLs that represent valid web origins for use with web message response mode.
- addons
Dict[Client
Addons] List(Resource). Configuration settings for add-ons for this client. For details, see Add-ons.
- allowed_
logout_ List[str]urls List(String). URLs that Auth0 may redirect to after logout.
- allowed_
origins List[str] List(String). URLs that represent valid origins for cross-origin resource sharing. By default, all your callback URLs will be allowed.
- app_
type str String. Type of application the client represents. Options include
native,spa,regular_web,non_interactive,rms,box,cloudbees,concur,dropbox,mscrm,echosign,egnyte,newrelic,office365,salesforce,sentry,sharepoint,slack,springcm,zendesk,zoom.- callbacks List[str]
List(String). URLs that Auth0 may call back to after a user authenticates for the client. Make sure to specify the protocol (https://) otherwise the callback may fail in some cases. With the exception of custom URI schemes for native clients, all callbacks should use protocol https://.
- client_
id str String. ID of the client.
- client_
metadata Dict[str, Any] Map(String)
- client_
secret str String. Secret for the client; keep this private.
- client_
secret_ Dict[str, Any]rotation_ trigger Map.
- cross_
origin_ boolauth Boolean. Indicates whether or not the client can be used to make cross-origin authentication requests.
- cross_
origin_ strloc String. URL for the location on your site where the cross-origin verification takes place for the cross-origin auth flow. Used when performing auth in your own domain instead of through the Auth0-hosted login page.
- custom_
login_ strpage String. Content of the custom login page.
- custom_
login_ boolpage_ on Boolean. Indicates whether or not a custom login page is to be used.
- custom_
login_ strpage_ preview String.
- description str
String, (Max length = 140 characters). Description of the purpose of the client.
- encryption_
key Dict[str, str] Map(String).
- form_
template str String. Form template for WS-Federation protocol.
- grant_
types List[str] List(String). Types of grants that this client is authorized to use.
- initiate_
login_ struri - is_
first_ boolparty Boolean. Indicates whether or not this client is a first-party client.
- is_
token_ boolendpoint_ ip_ header_ trusted Boolean. Indicates whether or not the token endpoint IP header is trusted.
- jwt_
configuration Dict[ClientJwt Configuration] List(Resource). Configuration settings for the JWTs issued for this client. For details, see JWT Configuration.
- logo_
uri str String. URL of the logo for the client. Recommended size is 150px x 150px. If none is set, the default badge for the application type will be shown.
- mobile
Dict[Client
Mobile] List(Resource). Configuration settings for mobile native applications. For details, see Mobile.
- name str
String. Name of the client.
- oidc_
conformant bool Boolean. Indicates whether or not this client will conform to strict OIDC specifications.
- sso bool
Boolean. Indicates whether or not the client should use Auth0 rather than the IdP to perform Single Sign-On (SSO). True = Use Auth0.
- sso_
disabled bool Boolean. Indicates whether or not SSO is disabled.
- token_
endpoint_ strauth_ method String. Defines the requested authentication method for the token endpoint. Options include
none(public client without a client secret),client_secret_post(client uses HTTP POST parameters),client_secret_basic(client uses HTTP Basic).- web_
origins List[str] List(String). URLs that represent valid web origins for use with web message response mode.
Supporting Types
ClientAddons
- Aws Dictionary<string, object>
String
- Azure
Blob Dictionary<string, object> String
- Azure
Sb Dictionary<string, object> String
- Box Dictionary<string, object>
String
- Cloudbees Dictionary<string, object>
String
- Concur Dictionary<string, object>
String
- Dropbox Dictionary<string, object>
String
- Echosign Dictionary<string, object>
String
- Egnyte Dictionary<string, object>
String
- Firebase Dictionary<string, object>
String
- Layer Dictionary<string, object>
String
- Mscrm Dictionary<string, object>
String
- Newrelic Dictionary<string, object>
String
- Office365 Dictionary<string, object>
String
- Rms Dictionary<string, object>
String
- Salesforce Dictionary<string, object>
String
- Salesforce
Api Dictionary<string, object> String
- Salesforce
Sandbox Dictionary<string, object>Api String
- Samlp
Client
Addons Samlp Args List(Resource). Configuration settings for a SAML add-on. For details, see SAML.
- Sap
Api Dictionary<string, object> String
- Sentry Dictionary<string, object>
String
- Dictionary<string, object>
String
- Slack Dictionary<string, object>
String
- Springcm Dictionary<string, object>
String
- Wams Dictionary<string, object>
String
- Wsfed Dictionary<string, object>
String
- Zendesk Dictionary<string, object>
String
- Zoom Dictionary<string, object>
String
- Aws map[string]interface{}
String
- Azure
Blob map[string]interface{} String
- Azure
Sb map[string]interface{} String
- Box map[string]interface{}
String
- Cloudbees map[string]interface{}
String
- Concur map[string]interface{}
String
- Dropbox map[string]interface{}
String
- Echosign map[string]interface{}
String
- Egnyte map[string]interface{}
String
- Firebase map[string]interface{}
String
- Layer map[string]interface{}
String
- Mscrm map[string]interface{}
String
- Newrelic map[string]interface{}
String
- Office365 map[string]interface{}
String
- Rms map[string]interface{}
String
- Salesforce map[string]interface{}
String
- Salesforce
Api map[string]interface{} String
- Salesforce
Sandbox map[string]interface{}Api String
- Samlp
Client
Addons Samlp List(Resource). Configuration settings for a SAML add-on. For details, see SAML.
- Sap
Api map[string]interface{} String
- Sentry map[string]interface{}
String
- map[string]interface{}
String
- Slack map[string]interface{}
String
- Springcm map[string]interface{}
String
- Wams map[string]interface{}
String
- Wsfed map[string]interface{}
String
- Zendesk map[string]interface{}
String
- Zoom map[string]interface{}
String
- aws {[key: string]: any}
String
- azure
Blob {[key: string]: any} String
- azure
Sb {[key: string]: any} String
- box {[key: string]: any}
String
- cloudbees {[key: string]: any}
String
- concur {[key: string]: any}
String
- dropbox {[key: string]: any}
String
- echosign {[key: string]: any}
String
- egnyte {[key: string]: any}
String
- firebase {[key: string]: any}
String
- layer {[key: string]: any}
String
- mscrm {[key: string]: any}
String
- newrelic {[key: string]: any}
String
- office365 {[key: string]: any}
String
- rms {[key: string]: any}
String
- salesforce {[key: string]: any}
String
- salesforce
Api {[key: string]: any} String
- salesforce
Sandbox {[key: string]: any}Api String
- samlp
Client
Addons Samlp List(Resource). Configuration settings for a SAML add-on. For details, see SAML.
- sap
Api {[key: string]: any} String
- sentry {[key: string]: any}
String
- {[key: string]: any}
String
- slack {[key: string]: any}
String
- springcm {[key: string]: any}
String
- wams {[key: string]: any}
String
- wsfed {[key: string]: any}
String
- zendesk {[key: string]: any}
String
- zoom {[key: string]: any}
String
- aws Dict[str, Any]
String
- azure
Blob Dict[str, Any] String
- azure
Sb Dict[str, Any] String
- box Dict[str, Any]
String
- cloudbees Dict[str, Any]
String
- concur Dict[str, Any]
String
- dropbox Dict[str, Any]
String
- echosign Dict[str, Any]
String
- egnyte Dict[str, Any]
String
- firebase Dict[str, Any]
String
- layer Dict[str, Any]
String
- mscrm Dict[str, Any]
String
- newrelic Dict[str, Any]
String
- office365 Dict[str, Any]
String
- rms Dict[str, Any]
String
- salesforce Dict[str, Any]
String
- salesforce
Api Dict[str, Any] String
- salesforce
Sandbox Dict[str, Any]Api String
- samlp
Dict[Client
Addons Samlp] List(Resource). Configuration settings for a SAML add-on. For details, see SAML.
- sap
Api Dict[str, Any] String
- sentry Dict[str, Any]
String
- Dict[str, Any]
String
- slack Dict[str, Any]
String
- springcm Dict[str, Any]
String
- wams Dict[str, Any]
String
- wsfed Dict[str, Any]
String
- zendesk Dict[str, Any]
String
- zoom Dict[str, Any]
String
ClientAddonsSamlp
- Audience string
String. Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- Authn
Context stringClass Ref String. Class reference of the authentication context.
- Binding string
String. Protocol binding used for SAML logout responses.
- Create
Upn boolClaim Boolean, (Default=true) Indicates whether or not a UPN claim should be created.
- Destination string
String. Destination of the SAML Response. If not specified, it will be AssertionConsumerUrlof SAMLRequest or Callback URL if there was no SAMLRequest.
- Digest
Algorithm string String, (Default=
sha1). Algorithm used to calculate the digest of the SAML Assertion or response. Options includedefaultsha1andsha256.- Include
Attribute boolName Format Boolean,(Default=true). Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion.
- Lifetime
In intSeconds Integer, (Default=3600). Number of seconds during which the token is valid.
- Logout
Client
Addons Samlp Logout Args Map(Resource). Configuration settings for logout. For details, see Logout.
- Map
Identities bool Boolean, (Default=true). Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available.
- Map
Unknown boolClaims As Is Boolean, (Default=false). Indicates whether or not to add a prefix of
http://schema.auth0.comto any claims that are not mapped to the common profile when passed through in the output assertion.- Mappings Dictionary<string, object>
Map(String). Mappings between the Auth0 user profile property name (
name) and the output attributes on the SAML attribute in the assertion (value).- Name
Identifier stringFormat String, (Default=
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified). Format of the name identifier.- Name
Identifier List<string>Probes List(String). Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- Passthrough
Claims boolWith No Mapping Boolean, (Default=true). Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion.
- Recipient string
String. Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or Callback URL if no SAMLRequest was sent.
- Sign
Response bool Boolean. Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- Signature
Algorithm string String, (Default=
rsa-sha1). Algorithm used to sign the SAML Assertion or response. Options includersa-sha1andrsa-sha256.- Typed
Attributes bool Boolean, (Default=true). Indicates whether or not we should infer the
xs:typeof the element. Types includexs:string,xs:boolean,xs:double, andxs:anyType. When set to false, allxs:typearexs:anyType.
- Audience string
String. Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- Authn
Context stringClass Ref String. Class reference of the authentication context.
- Binding string
String. Protocol binding used for SAML logout responses.
- Create
Upn boolClaim Boolean, (Default=true) Indicates whether or not a UPN claim should be created.
- Destination string
String. Destination of the SAML Response. If not specified, it will be AssertionConsumerUrlof SAMLRequest or Callback URL if there was no SAMLRequest.
- Digest
Algorithm string String, (Default=
sha1). Algorithm used to calculate the digest of the SAML Assertion or response. Options includedefaultsha1andsha256.- Include
Attribute boolName Format Boolean,(Default=true). Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion.
- Lifetime
In intSeconds Integer, (Default=3600). Number of seconds during which the token is valid.
- Logout
Client
Addons Samlp Logout Map(Resource). Configuration settings for logout. For details, see Logout.
- Map
Identities bool Boolean, (Default=true). Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available.
- Map
Unknown boolClaims As Is Boolean, (Default=false). Indicates whether or not to add a prefix of
http://schema.auth0.comto any claims that are not mapped to the common profile when passed through in the output assertion.- Mappings map[string]interface{}
Map(String). Mappings between the Auth0 user profile property name (
name) and the output attributes on the SAML attribute in the assertion (value).- Name
Identifier stringFormat String, (Default=
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified). Format of the name identifier.- Name
Identifier []stringProbes List(String). Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- Passthrough
Claims boolWith No Mapping Boolean, (Default=true). Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion.
- Recipient string
String. Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or Callback URL if no SAMLRequest was sent.
- Sign
Response bool Boolean. Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- Signature
Algorithm string String, (Default=
rsa-sha1). Algorithm used to sign the SAML Assertion or response. Options includersa-sha1andrsa-sha256.- Typed
Attributes bool Boolean, (Default=true). Indicates whether or not we should infer the
xs:typeof the element. Types includexs:string,xs:boolean,xs:double, andxs:anyType. When set to false, allxs:typearexs:anyType.
- audience string
String. Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- authn
Context stringClass Ref String. Class reference of the authentication context.
- binding string
String. Protocol binding used for SAML logout responses.
- create
Upn booleanClaim Boolean, (Default=true) Indicates whether or not a UPN claim should be created.
- destination string
String. Destination of the SAML Response. If not specified, it will be AssertionConsumerUrlof SAMLRequest or Callback URL if there was no SAMLRequest.
- digest
Algorithm string String, (Default=
sha1). Algorithm used to calculate the digest of the SAML Assertion or response. Options includedefaultsha1andsha256.- include
Attribute booleanName Format Boolean,(Default=true). Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion.
- lifetime
In numberSeconds Integer, (Default=3600). Number of seconds during which the token is valid.
- logout
Client
Addons Samlp Logout Map(Resource). Configuration settings for logout. For details, see Logout.
- map
Identities boolean Boolean, (Default=true). Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available.
- map
Unknown booleanClaims As Is Boolean, (Default=false). Indicates whether or not to add a prefix of
http://schema.auth0.comto any claims that are not mapped to the common profile when passed through in the output assertion.- mappings {[key: string]: any}
Map(String). Mappings between the Auth0 user profile property name (
name) and the output attributes on the SAML attribute in the assertion (value).- name
Identifier stringFormat String, (Default=
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified). Format of the name identifier.- name
Identifier string[]Probes List(String). Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- passthrough
Claims booleanWith No Mapping Boolean, (Default=true). Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion.
- recipient string
String. Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or Callback URL if no SAMLRequest was sent.
- sign
Response boolean Boolean. Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- signature
Algorithm string String, (Default=
rsa-sha1). Algorithm used to sign the SAML Assertion or response. Options includersa-sha1andrsa-sha256.- typed
Attributes boolean Boolean, (Default=true). Indicates whether or not we should infer the
xs:typeof the element. Types includexs:string,xs:boolean,xs:double, andxs:anyType. When set to false, allxs:typearexs:anyType.
- audience str
String. Audience of the SAML Assertion. Default will be the Issuer on SAMLRequest.
- authn
Context strClass Ref String. Class reference of the authentication context.
- binding str
String. Protocol binding used for SAML logout responses.
- create
Upn boolClaim Boolean, (Default=true) Indicates whether or not a UPN claim should be created.
- destination str
String. Destination of the SAML Response. If not specified, it will be AssertionConsumerUrlof SAMLRequest or Callback URL if there was no SAMLRequest.
- digest
Algorithm str String, (Default=
sha1). Algorithm used to calculate the digest of the SAML Assertion or response. Options includedefaultsha1andsha256.- include
Attribute boolName Format Boolean,(Default=true). Indicates whether or not we should infer the NameFormat based on the attribute name. If set to false, the attribute NameFormat is not set in the assertion.
- lifetime
In floatSeconds Integer, (Default=3600). Number of seconds during which the token is valid.
- logout
Dict[Client
Addons Samlp Logout] Map(Resource). Configuration settings for logout. For details, see Logout.
- map
Identities bool Boolean, (Default=true). Indicates whether or not to add additional identity information in the token, such as the provider used and the access_token, if available.
- map
Unknown boolClaims As Is Boolean, (Default=false). Indicates whether or not to add a prefix of
http://schema.auth0.comto any claims that are not mapped to the common profile when passed through in the output assertion.- mappings Dict[str, Any]
Map(String). Mappings between the Auth0 user profile property name (
name) and the output attributes on the SAML attribute in the assertion (value).- name
Identifier strFormat String, (Default=
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified). Format of the name identifier.- name
Identifier List[str]Probes List(String). Attributes that can be used for Subject/NameID. Auth0 will try each of the attributes of this array in order and use the first value it finds.
- passthrough
Claims boolWith No Mapping Boolean, (Default=true). Indicates whether or not to passthrough claims that are not mapped to the common profile in the output assertion.
- recipient str
String. Recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or Callback URL if no SAMLRequest was sent.
- sign
Response bool Boolean. Indicates whether or not the SAML Response should be signed instead of the SAML Assertion.
- signature
Algorithm str String, (Default=
rsa-sha1). Algorithm used to sign the SAML Assertion or response. Options includersa-sha1andrsa-sha256.- typed
Attributes bool Boolean, (Default=true). Indicates whether or not we should infer the
xs:typeof the element. Types includexs:string,xs:boolean,xs:double, andxs:anyType. When set to false, allxs:typearexs:anyType.
ClientAddonsSamlpLogout
- Callback string
String. Service provider’s Single Logout Service URL, to which Auth0 will send logout requests and responses.
- Slo
Enabled bool Boolean. Indicates whether or not Auth0 should notify service providers of session termination.
- Callback string
String. Service provider’s Single Logout Service URL, to which Auth0 will send logout requests and responses.
- Slo
Enabled bool Boolean. Indicates whether or not Auth0 should notify service providers of session termination.
- callback string
String. Service provider’s Single Logout Service URL, to which Auth0 will send logout requests and responses.
- slo
Enabled boolean Boolean. Indicates whether or not Auth0 should notify service providers of session termination.
- callback str
String. Service provider’s Single Logout Service URL, to which Auth0 will send logout requests and responses.
- slo
Enabled bool Boolean. Indicates whether or not Auth0 should notify service providers of session termination.
ClientJwtConfiguration
- Alg string
String. Algorithm used to sign JWTs.
- Lifetime
In intSeconds Integer. Number of seconds during which the JWT will be valid.
- Scopes Dictionary<string, string>
Map(String). Permissions (scopes) included in JWTs.
- Secret
Encoded bool Boolean. Indicates whether or not the client secret is base64 encoded.
- Alg string
String. Algorithm used to sign JWTs.
- Lifetime
In intSeconds Integer. Number of seconds during which the JWT will be valid.
- Scopes map[string]string
Map(String). Permissions (scopes) included in JWTs.
- Secret
Encoded bool Boolean. Indicates whether or not the client secret is base64 encoded.
- alg string
String. Algorithm used to sign JWTs.
- lifetime
In numberSeconds Integer. Number of seconds during which the JWT will be valid.
- scopes {[key: string]: string}
Map(String). Permissions (scopes) included in JWTs.
- secret
Encoded boolean Boolean. Indicates whether or not the client secret is base64 encoded.
- alg str
String. Algorithm used to sign JWTs.
- lifetime
In floatSeconds Integer. Number of seconds during which the JWT will be valid.
- scopes Dict[str, str]
Map(String). Permissions (scopes) included in JWTs.
- secret
Encoded bool Boolean. Indicates whether or not the client secret is base64 encoded.
ClientMobile
- Android
Client
Mobile Android Args List(Resource). Configuration settings for Android native apps. For details, see Android.
- Ios
Client
Mobile Ios Args List(Resource). Configuration settings for i0S native apps. For details, see iOS.
- Android
Client
Mobile Android List(Resource). Configuration settings for Android native apps. For details, see Android.
- Ios
Client
Mobile Ios List(Resource). Configuration settings for i0S native apps. For details, see iOS.
- android
Client
Mobile Android List(Resource). Configuration settings for Android native apps. For details, see Android.
- ios
Client
Mobile Ios List(Resource). Configuration settings for i0S native apps. For details, see iOS.
- android
Dict[Client
Mobile Android] List(Resource). Configuration settings for Android native apps. For details, see Android.
- ios
Dict[Client
Mobile Ios] List(Resource). Configuration settings for i0S native apps. For details, see iOS.
ClientMobileAndroid
- App
Package stringName String
- Sha256Cert
Fingerprints List<string> List(String)
- App
Package stringName String
- Sha256Cert
Fingerprints []string List(String)
- app
Package stringName String
- sha256Cert
Fingerprints string[] List(String)
- app
Package strName String
- sha256Cert
Fingerprints List[str] List(String)
ClientMobileIos
- App
Bundle stringIdentifier String
- Team
Id string String
- App
Bundle stringIdentifier String
- Team
Id string String
- app
Bundle stringIdentifier String
- team
Id string String
- app
Bundle strIdentifier String
- team
Id str String
Package Details
- Repository
- https://github.com/pulumi/pulumi-auth0
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
auth0Terraform Provider.