Configuring Auth0 Authentication

Auth0 provides an enterprise SAAS identity provider.

Set up Auth0 as your IDP

To set up Auth0 as your IDP, you complete some steps in Auth0 and then in Wayfinder, as shown below.

1 - Configure Auth0

To configure Auth0:

1. If you don't have one, sign up for an account from the Auth0 home page.

2. From the drop-down in the top left of the Auth0 dashboard note your auth0 Tenant (e.g. 'my-org') and Region (e.g. 'eu' or 'us').

3. From the dashboard side menu choose Applications, and then Create Application.

4. Give the application a name (e.g. 'wayfinder') and choose Regular Web Application.

5. Once provisioned click the Settings tab.

6. Note the Client ID and Client Secret for your new application.

7. Scroll down to Allowed Callback URLs and add your Wayfinder API URL, for example:

   • https://api.wf.yourorg.io/oauth/callback

8. Click the down arrow next to Advanced Settings.

9. Click the OAuth tab and ensure that:

   • JsonWebToken Signature Algorithm is set to RS256
   • OIDC Conformant is ON.

10. Use the noted tenant, region, client ID, and client secret to configure Wayfinder.

2 - Configure Wayfinder

Once you've created your application as shown above, use the values you noted to configure Wayfinder.

To complete the Auth0 configuration in Wayfinder:

In Wayfinder's web interface:

1. Select Admin, navigate to Access > SSO, and then click Connect for your chosen IDP provider.
2. Click Configure, and then provide the required information.
3. Click Validate and test.
4. When the validation is complete, click Connect.

note

If you change your IDP configuration to a different provider, any user who is not associated with the same email address in the new provider will lose access to their Wayfinder account.

Configure users in Auth0

To configure a user:

1. From the Auth0 dashboard side menu, select User Management.

2. To create each user:

   1. Create the user by selecting Users.

   2. Create a role by selecting Roles.

   3. Add the role to the user.