Skip to main content

auth0

Auth0 is an identity and access management platform for authenticating and authorizing users across applications. This connector uses the Auth0 Management API v2 to read and manage tenant resources — users, clients (applications), connections, roles, and organizations. Use it to sync identity data into your warehouse or to provision and maintain Auth0 resources from your Nexla flows.

auth0 icon

Power end-to-end data operations for your auth0 API with Nexla. Our bi-directional auth0 connector is purpose-built for auth0, making it simple to ingest data, sync it across systems, and deliver it anywhere — all with no coding required. Nexla turns API-sourced data into ready-to-use, reusable data products and makes it easy to send data to auth0 or any other destination. With comprehensive monitoring, lineage tracking, and access controls, Nexla keeps your auth0 workflows fast, secure, and fully governed.

Features

Type: API

SourceDestination

  • Seamless API Integration: Connect to any endpoint as source or destination without coding, with automatic data product creation
  • Visual Composition & Chaining: Build complex integrations using visual templates, chain API calls, and compose workflows with data validation and filtering
  • API Proxy: Expose curated slices of your data securely with a secure and customizable API proxy that validates and transforms data on the fly
  • Request optimization with intelligent batching, retry, and caching to minimize API calls and costs

Prerequisites​

The Auth0 Management API authenticates every request with a bearer access token scoped to your tenant. Nexla supports two credential methods: providing a Management API token directly (API Key), or letting Nexla request tokens for you using a client ID and secret (OAuth 2.0 client credentials). Both methods require a Machine-to-Machine application in your Auth0 tenant that is authorized for the Management API.

To prepare your Auth0 credentials:

  1. Sign in to the Auth0 Dashboard for your tenant.

  2. Navigate to Applications > Applications, and create (or select) a Machine to Machine application.

  3. Authorize the application for the Auth0 Management API and grant it the scopes required by the endpoints you plan to use (for example, read:users, create:users, read:clients, read:connections, read:roles, read:organizations). Each Management API endpoint requires its own specific scopes.

  4. From the application's Settings tab, copy the Client ID and Client Secret.

  5. Note your tenant domain. Your Management API Base URL is https://YOUR_TENANT.auth0.com/api/v2, and your token endpoint (Access Token URL) is https://YOUR_TENANT.auth0.com/oauth/token.

  6. If you plan to use the API Key method, obtain a Management API access token by making a client_credentials request to the token endpoint (with the audience set to your Management API identifier). Note that Management API tokens are short-lived, so the OAuth 2.0 method — where Nexla requests fresh tokens automatically — is generally preferred for scheduled flows.

For full details, see Get Management API Access Tokens for Production and the Auth0 Management API v2 reference.

Authenticate​

Credentials required​

An authentication method that requires sending a unique secret token with each API request

FieldRequiredSecretDescription
API Key ValueYesYesAn encoded string value used as a secret token to authenticate API requests
Base URLYesNoAuth0 tenant Management API base URL, e.g. https://YOUR_TENANT.auth0.com/api/v2

Create a credential in Nexla​

  1. After selecting the data source/destination type, click the Add Credential tile to open the Add New Credential overlay.

  2. Enter a name for the credential in the Credential Name field and a short, meaningful description in the Credential Description field.

  3. Select the authentication method you want to use, and enter the required values. For the API Key method, provide your Management API token and Base URL. For the OAuth 2.0 method, provide your Client ID, Client Secret, Base URL, and Access Token URL that you obtained in Prerequisites.

  4. Click the Save button at the bottom of the overlay. The newly added credential will now appear in a tile on the Authenticate screen during data source/destination creation.

Use as a data source​

To create a new data flow, navigate to the Integrate section, and click the New Data Flow button. Select the auth0 connector tile, then select the credential that will be used to connect to the Auth0 tenant, and click Next; or, create a new auth0 credential for use in this flow.

Endpoint templates​

Nexla provides pre-built templates that can be used to rapidly configure data sources to ingest data from common Auth0 Management API endpoints. Select the endpoint from which this source will fetch data from the Endpoint pulldown menu. Available endpoint templates are listed in the expandable boxes below.

[Rest API] Get clients

Retrieve clients (applications and SSO integrations) matching provided filters, with optional field selection and pagination.

[Rest API] Get client by ID

Retrieve details for a single client (application) by its client ID, with optional field selection.

[Rest API] Get all connections

Retrieve all connections that can be used for identifying users, with optional filters by strategy or name.

[Rest API] Get organizations

Retrieve a paginated list of organizations configured for the tenant.

[Rest API] Get organization

Retrieve details for a single organization by its organization ID.

[Rest API] Get roles

Retrieve a filtered list of roles that can be assigned to users.

[Rest API] Get a role

Retrieve details for a single role by its role ID.

[Rest API] List or Search Users

Retrieve details of users, with the ability to search and filter using Lucene query syntax.

[Rest API] Get a User

Retrieve user details by user ID, with optional field selection.

Once the selected endpoint template has been configured, click the Test button to the right of the endpoint selection menu to retrieve a sample of the data that will be fetched. Sample data will be displayed in the Endpoint Test Result panel on the right, allowing you to verify that the source is configured correctly before saving.

Manual configuration​

auth0 data sources can also be manually configured to ingest data from any valid Auth0 Management API endpoint, including endpoints not covered by the pre-built templates, chained API calls, or custom request parameters. Select the Advanced tab at the top of the configuration screen, and follow the instructions in Connect to Any API to configure the API method, endpoint URL, date/time and lookup macros, path to data, metadata, and request headers.

Once all of the relevant settings have been configured, click the Create button in the upper right corner of the screen to save and create the new auth0 data source. Nexla will now begin ingesting data from the configured endpoint and will organize any data that it finds into one or more Nexsets.

Use as a destination​

Click the + icon on the Nexset that will be sent to the auth0 destination, and select the Send to Destination option from the menu. Select the auth0 connector from the list of available destination connectors, then select the credential that will be used to connect to the Auth0 tenant, and click Next; or, create a new auth0 credential for use in this flow.

Endpoint templates​

Nexla provides pre-built templates that can be used to rapidly configure destinations to send data to common Auth0 Management API endpoints. Select the endpoint to which data will be sent from the Endpoint pulldown menu. Then, click on the template in the list below to expand it, and follow the instructions to configure additional endpoint settings.

[Rest API] Create a client

Create a new client (application or SSO integration) in the Auth0 tenant.

[Rest API] Delete a client

Delete a client (application) by its client ID.

[Rest API] Create a connection

Create a new connection according to the JSON object received in the request body.

[Rest API] Delete a connection

Delete a connection and its associated user identities by connection ID.

[Rest API] Create an Organization

Create a new organization within the tenant.

[Rest API] Delete organization

Delete an organization by its organization ID.

[Rest API] Create a role

Create a new role that can be assigned to users.

[Rest API] Delete a role

Delete a role by its role ID.

[Rest API] Create a User

Create a new user for a given database or passwordless connection.

[Rest API] Update a User

Update a user by user ID with the provided fields.

[Rest API] Delete a User

Delete a single user by user ID.

Manual configuration​

auth0 destinations can also be manually configured to send data to any valid Auth0 Management API endpoint. Select the Advanced tab at the top of the configuration screen, and follow the instructions in Connect to Any API to configure the API method, data format, endpoint URL, request headers, attribute exclusions, record batching, and response webhooks.

Save & activate​

Once all endpoint settings have been configured, click the Done button in the upper right corner of the screen to save and create the destination. To send the data to the configured Auth0 endpoint, open the destination resource menu, and select Activate.

The Nexset data will not be sent to the Auth0 endpoint until the destination is activated. Destinations can be activated immediately or at a later time, providing full control over data movement.